press-release-writing

Warn

Audited by Socket on Aug 6, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the core writing purpose is benign, but the skill expands its trust boundary by instructing installation of another unverified skill (`belt-sh/cli`) instead of using the publisher's documented belt install path. Research via external search services is plausible for fact-checking, yet the transitive install plus broad Bash access make the overall footprint disproportionate to a press-release helper.

Confidence: 87%Severity: 72%
Audit Metadata
Analyzed At
Aug 6, 2026, 05:03 AM
Package URL
pkg:socket/skills-sh/whytryharder%2Fskills%2Fpress-release-writing%2F@14cc2ab36dae14500ffef46f1ef5bbe5873ca92254d92fbc753b3f4e5f4a7f4f
Security Audit — socket — press-release-writing