release

Warn

Audited by Socket on Mar 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core release-automation behavior is broadly consistent with the stated purpose and uses mostly official tooling, but the skill is over-empowered by design. Autonomous no-confirmation execution, generation of publishing workflows, secret forwarding to release tools, and unrelated telemetry writes make its footprint broader and riskier than a simple setup helper.

Confidence: 87%Severity: 68%
Audit Metadata
Analyzed At
Mar 23, 2026, 11:04 AM
Package URL
pkg:socket/skills-sh/tinh2%2Fskills-hub-registry%2Frelease%2F@5b1385b622caee4c1900e2c4c00f38132b9ba65a
Security Audit — socket — release