asc-users

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

The skill is purpose-aligned and not overtly malicious, but it delegates high-impact App Store Connect administration and Apple credentials to an unofficial third-party CLI. Using the Homebrew-distributed, open-source `asc` tool reduces trust concerns versus an unknown binary, yet credential forwarding and sensitive admin actions keep the overall risk at medium rather than low.

Confidence: 85%Severity: 56%
Audit Metadata
Analyzed At
Sep 22, 2026, 08:43 AM
Package URL
pkg:socket/skills-sh/tddworks%2Fasc-cli-skills%2Fasc-users%2F@2d9383836c5cf6482cc0da70822001f0f8d6103c9a14c86c951af0dd31140b2e