pipeline-operations
Warn
Audited by Socket on Apr 28, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill’s purpose is coherent for CI/CD operations, but it relies on an official-looking yet unverifiable standalone binary and then feeds that binary credentials and private keys. The actions themselves fit the stated purpose, but the install trust and credential-forwarding footprint are disproportionately risky.
Confidence: 90%Severity: 84%
Audit Metadata