alpha-feature

Warn

Audited by Socket on Jun 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose matches a skill-development pipeline, but the footprint includes autonomous commit/push/install actions and execution of opaque repo-defined Bun scripts. This is not confirmed malicious, yet it carries medium risk because it can publish code and run local project commands with limited verification.

Confidence: 87%Severity: 63%
Audit Metadata
Analyzed At
Jun 18, 2026, 01:17 PM
Package URL
pkg:socket/skills-sh/soul-brews-studio%2Foracle-skills-cli%2Falpha-feature%2F@22e0356ee2f196522b18d2b5de3ebf2a18442417fed1240f95b4dfa7b998371c
Security Audit — socket — alpha-feature