asc-submission-health

Warn

Audited by Socket on Apr 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is purpose-aligned for App Store submission operations, but it relies on an unofficial third-party CLI that may handle App Store Connect credentials and perform consequential release actions. No obvious exfiltration or hidden behavior appears in the skill text, so this is not confirmed malware, but the third-party credential handling and real-world account actions make it medium risk.

Confidence: 85%Severity: 58%
Audit Metadata
Analyzed At
Apr 17, 2026, 02:27 AM
Package URL
pkg:socket/skills-sh/rorkai%2Fapp-store-connect-cli-skills%2Fasc-submission-health%2F@f27fe85da252110c50a1e635daa83358c08cb87e