skills/tobihagemann/turbo/finalize/Socket

finalize

Warn

Audited by Socket on Mar 14, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The visible workflow is mostly coherent for a finalize/QA skill and uses official Git/GitHub surfaces, but it chains several unspecified slash skills and can perform external repository actions like push and PR updates. The main risk is opaque transitive trust and semi-autonomous publishing behavior, not confirmed malware or credential theft.

Confidence: 83%Severity: 56%

Audit Metadata

Analyzed At

Mar 14, 2026, 04:06 PM

Package URL

pkg:socket/skills-sh/tobihagemann%2Fturbo%2Ffinalize%2F@6495cb13bbb9951ebd55c6139995322fca457c1b