skills/thatrebeccarae/claude-marketing/release-notes/Socket

release-notes

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s runtime behavior is largely consistent with release-note generation and uses official git/GitHub tooling with explicit approval gates, but its installation path is a third-party/transitive skill source under a personal GitHub account and the exact referenced repo was not verifiable from the provided evidence. Main risk is install trust, not confirmed malicious behavior.

Confidence: 90%Severity: 72%

Audit Metadata

Analyzed At

Sep 17, 2026, 08:56 PM

Package URL

pkg:socket/skills-sh/thatrebeccarae%2Fclaude-marketing%2Frelease-notes%2F@f84bac9a3716367a3545ca8da3de3e80b01fec11a0508e52fa153bba56a9fb89