github-release-management

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is broadly aligned with release management, but its scope is powerful and includes autonomous publishing/deployment plus credential use across third-party orchestration tooling. No confirmed malware or hidden exfiltration is evident, yet the combination of alpha npm CLIs, optional MCP/swarm components, and real-world release actions makes this a medium-to-high operational security risk.

Confidence: 85%Severity: 68%
Audit Metadata
Analyzed At
Sep 15, 2026, 11:37 AM
Package URL
pkg:socket/skills-sh/ruvnet%2Fruflo%2Fgithub-release-management%2F@feac50c8e39f21165eb44d0698e1504a0814ea6709a417a117ea093d02b85078