sociuu-finalize

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The workflow purpose is coherent and the skill sets sensible limits around staging, communication, and cleanup, but it appears to depend on Sociuu-specific local tooling whose provenance is not publicly verifiable from the provided evidence. That makes the main concern install/execution trust rather than confirmed malicious behavior or exfiltration.

Confidence: 82%Severity: 75%
Audit Metadata
Analyzed At
Sep 17, 2026, 06:05 PM
Package URL
pkg:socket/skills-sh/sociuu%2Fsociuu-skills%2Fsociuu-finalize%2F@7f2f5eae291410c235b791ea76a5447adbf397462ecc23598f701f264c891bd0