asc-apple-ads

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is broadly coherent for Apple Ads management, but it depends on an unofficial CLI and forwards high-value Apple Ads credentials/private keys into that tool while enabling spend-affecting actions. Data flows appear consistent with Apple Ads usage and the mutation safeguards reduce risk, so this is not clearly malicious, but the credential-forwarding and third-party-tool trust model make it medium-to-high risk.

Confidence: 86%Severity: 69%
Audit Metadata
Analyzed At
Aug 18, 2026, 04:26 AM
Package URL
pkg:socket/skills-sh/rorkai%2Fapp-store-connect-cli-skills%2Fasc-apple-ads%2F@5e960409d2e40087add5ee3da5a01148a5252aad6d441efb321cb2900356d96e
Security Audit — socket — asc-apple-ads