launch

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's overall behavior matches its stated goal of building and deploying a SaaS app, so it is not fundamentally incompatible or clearly malicious. However, it has medium-high security risk because it combines broad local execution, multi-agent code generation, credential-file access, and deployment through repository-local wrapper scripts whose network behavior is not independently verified.

Confidence: 84%Severity: 68%
Audit Metadata
Analyzed At
Mar 29, 2026, 07:26 PM
Package URL
pkg:socket/skills-sh/popmechanic%2Fvibes-cli%2Flaunch%2F@8098a20b2be37c486a2058275543beceabc3af04