maintain

Warn

Audited by Socket on Apr 6, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s overall behavior matches a maintenance/orchestration purpose, and most commands are standard developer checks. However, risk is elevated by autonomous `--fix` actions, runtime package execution via `bunx`, and especially the use of a third-party unofficial Linear CLI that receives user credentials/API access. This is not clearly malicious, but its install/execution trust and credential-forwarding choices warrant caution.

Confidence: 85%Severity: 64%
Audit Metadata
Analyzed At
Apr 6, 2026, 08:17 AM
Package URL
pkg:socket/skills-sh/seangjr%2Fproduct-skills%2Fmaintain%2F@fe0d8ab5bdf3d6e9ac269bbd244753e05b37e6e3