asc-notarization

Warn

Audited by Socket on Apr 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's notarization purpose is legitimate and most commands are standard Apple tooling, but it routes authentication and notarization through an unofficial third-party CLI (`asc`). That creates notable install-trust and credential-forwarding risk without evidence of malicious intent or unrelated data access.

Confidence: 88%Severity: 62%
Audit Metadata
Analyzed At
Apr 17, 2026, 02:25 AM
Package URL
pkg:socket/skills-sh/rorkai%2Fapp-store-connect-cli-skills%2Fasc-notarization%2F@36d8850790528df621beafcd6e511a6d24d685c0