pipeline-operations

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s purpose is coherent for CI/CD operations, but it relies on an official-looking yet unverifiable standalone binary and then feeds that binary credentials and private keys. The actions themselves fit the stated purpose, but the install trust and credential-forwarding footprint are disproportionately risky.

Confidence: 90%Severity: 84%
Audit Metadata
Analyzed At
Apr 28, 2026, 01:53 PM
Package URL
pkg:socket/skills-sh/acquia%2Facquia-skills%2Fpipeline-operations%2F@e48b871bb53526bb1e01d12383f8dcd49cc9ba21