productlane
Fail
Audited by Socket on Mar 12, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The skill appears to be a coherent, purpose-aligned tool for interacting with Productlane's API via curl, using an API key provided as an environment variable. There are no clear indicators of malicious behavior, unverifiable binaries, or inappropriate credential harvesting. The main risks are standard API credential handling and potential data exposure if logs or shared environments capture /tmp payloads; otherwise the data flows and installed components are proportionate to the stated purpose.
Confidence: 98%
Audit Metadata