skills/schalkneethling/create-project-calavera/npm-trusted-publishing-github-workflow/Socket

npm-trusted-publishing-github-workflow

Pass

Audited by Socket on Jul 22, 2026

Checks

Malicious behaviorInjection, exfiltration, untrusted installs

Security concernsCredential exposure, tool/trust exploitation

Code obfuscationHidden or obfuscated code

Suspicious patternsReconnaissance, excessive autonomy, resource use

Audit Metadata

Analyzed At

Jul 22, 2026, 07:29 PM

Package URL

pkg:socket/skills-sh/schalkneethling%2Fcreate-project-calavera%2Fnpm-trusted-publishing-github-workflow%2F@21b7c53b634e2e5c30d8802ddb0ae02b1fb0cff953b4fcc7687091251f0c7538