plugin-publish

Pass

Audited by Socket on Jun 23, 2026

Checks

Malicious behaviorInjection, exfiltration, untrusted installs

Security concernsCredential exposure, tool/trust exploitation

Code obfuscationHidden or obfuscated code

Suspicious patternsReconnaissance, excessive autonomy, resource use

Audit Metadata

Analyzed At

Jun 23, 2026, 10:40 PM

Package URL

pkg:socket/skills-sh/zhinjs%2Fcreate-zhin%2Fplugin-publish%2F@46d7f0eaa25398bb0bcd954397e175d011897e8ff1da2eab9ad2ac7c9ba6b88c