github-release-management
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill is broadly aligned with release management, but its scope is powerful and includes autonomous publishing/deployment plus credential use across third-party orchestration tooling. No confirmed malware or hidden exfiltration is evident, yet the combination of alpha npm CLIs, optional MCP/swarm components, and real-world release actions makes this a medium-to-high operational security risk.
Confidence: 85%Severity: 68%
Audit Metadata