skills/rorkai/app-store-connect-cli-skills/asc-in-app-events/Socket

asc-in-app-events

Warn

Audited by Socket on Oct 13, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the workflow is coherent for App Store Connect event management and routes data to Apple, but it relies on an ambiguous, non-Apple `asc` CLI without pinned install/provenance guidance. The main risk is supply-chain and credential-forwarding trust in a third-party tool, not clear malicious behavior in the skill itself.

Confidence: 87%Severity: 63%

Audit Metadata

Analyzed At

Oct 13, 2026, 08:18 PM

Package URL

pkg:socket/skills-sh/rorkai%2Fapp-store-connect-cli-skills%2Fasc-in-app-events%2F@2f8646a09d3532ad9fce65c8fd4e0865fd88ba2fa95fd32701551d70d29062df