skills/vectorize-io/hindsight/ship-it/Socket

ship-it

Warn

Audited by Socket on Sep 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s purpose broadly matches its GitHub/CI capabilities, and install/data-flow trust is mostly consistent with official GitHub tooling. The main risk is scope: it grants an agent broad autonomous power to change code, push branches, trigger CI, and merge PRs, plus transitive trust in repo-local review instructions/scripts.

Confidence: 88%Severity: 62%

Audit Metadata

Analyzed At

Sep 25, 2026, 03:48 AM

Package URL

pkg:socket/skills-sh/vectorize-io%2Fhindsight%2Fship-it%2F@76f2a0c44b518bbf7c95a012a79bd7763e8d57c30d75b804078e17ccf1c1681c