skills/slamb2k/mad-skills/ship/Socket

ship

Warn

Audited by Socket on Mar 14, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s capabilities mostly fit its stated PR-shipping purpose and installer trust is reasonable, but it grants an agent broad autonomous repository actions including push, PR creation, CI-driven edits, and merge. Risk is driven by action scope and transitive/local subagent trust, not clear credential theft or malicious exfiltration.

Confidence: 85%Severity: 68%

Audit Metadata

Analyzed At

Mar 14, 2026, 06:04 AM

Package URL

pkg:socket/skills-sh/slamb2k%2Fmad-skills%2Fship%2F@2cb35d57273b9967817039ad30c271919d4b318a