flutter-deploy

Warn

Audited by Socket on Mar 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core deployment behavior is coherent with a Flutter release skill, and data mainly flows to official AWS/Apple/Google tooling. However, the footprint is high risk because it is fully autonomous, can perform production deployments, executes arbitrary local setup scripts, and pulls raw signing secrets for local installation. No clear malicious exfiltration endpoint is present, but the privilege level and autonomous real-world action make this skill unsafe to grant broadly.

Confidence: 91%Severity: 82%
Audit Metadata
Analyzed At
Mar 23, 2026, 11:03 AM
Package URL
pkg:socket/skills-sh/tinh2%2Fskills-hub-registry%2Fflutter-deploy%2F@f54cd1e784947a911e3314401457d8428d1f8c45
Security Audit — socket — flutter-deploy