skills/yonatangross/orchestkit/release-sync/Socket

release-sync

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core behavior matches the stated release-sync purpose, and file access is proportionate, but the NotebookLM path depends on a third-party MCP server with unpinned installation patterns and indirect auth handling. HQ usage looks more plausible, yet overall trust and data-flow integrity are only partially verifiable, so this is not benign.

Confidence: 87%Severity: 64%

Audit Metadata

Analyzed At

Sep 17, 2026, 02:16 AM

Package URL

pkg:socket/skills-sh/yonatangross%2Forchestkit%2Frelease-sync%2F@5ea42d8495c0b5aa5414a389592a25d1e251d46eb485d095603dd744a5382513