skills/molechowski/agent-skills/git-ship/Socket

git-ship

Warn

Audited by Socket on Mar 14, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill is internally coherent as a GitHub automation workflow, and its visible network/data flow stays on official GitHub tooling. However, its core purpose is to bypass CI and branch-review protections using admin privileges, which is disproportionate and high impact for an agent skill; unspecified transitive skills add further trust uncertainty.

Confidence: 94%Severity: 89%

Audit Metadata

Analyzed At

Mar 14, 2026, 09:36 PM

Package URL

pkg:socket/skills-sh/MOlechowski%2Fagent-skills%2Fgit-ship%2F@63e1ca58d208c197a928d7bb0433c1f61ce16691