release
Warn
Audited by Socket on Mar 23, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core release-automation behavior is broadly consistent with the stated purpose and uses mostly official tooling, but the skill is over-empowered by design. Autonomous no-confirmation execution, generation of publishing workflows, secret forwarding to release tools, and unrelated telemetry writes make its footprint broader and riskier than a simple setup helper.
Confidence: 87%Severity: 68%
Audit Metadata