asc-users
Warn
Audited by Socket on Sep 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
The skill is purpose-aligned and not overtly malicious, but it delegates high-impact App Store Connect administration and Apple credentials to an unofficial third-party CLI. Using the Homebrew-distributed, open-source `asc` tool reduces trust concerns versus an unknown binary, yet credential forwarding and sensitive admin actions keep the overall risk at medium rather than low.
Confidence: 85%Severity: 56%
Audit Metadata