asc-testflight

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s capabilities match its TestFlight-management purpose, and the referenced CLI appears same-org and standardly distributed, which argues against malware. However, it forwards sensitive Apple API credentials to a third-party CLI rather than using direct official API flows, creating meaningful trust and credential-handling risk.

Confidence: 85%Severity: 56%
Audit Metadata
Analyzed At
Sep 22, 2026, 08:43 AM
Package URL
pkg:socket/skills-sh/tddworks%2Fasc-cli-skills%2Fasc-testflight%2F@d06dc18bfefbc943677c5b5e0cf1a2852a7d125c468966149734ceab0357285d