skills/seabbs/skills/org-releases/Socket

org-releases

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose is coherent, but the skill's critical dependency is an opaque local executable outside the skill with no provenance or integrity checks. Direct PR/release actions are purpose-aligned, yet the unverifiable helper script makes the overall execution trust high risk.

Confidence: 89%Severity: 78%

Audit Metadata

Analyzed At

Oct 8, 2026, 09:36 PM

Package URL

pkg:socket/skills-sh/seabbs%2Fskills%2Forg-releases%2F@3483c03a558dcd7b60129116a7c1311c7ef6348e36903f4b60754c195e6a4d65