travis-worker
Warn
Audited by Socket on Jul 8, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s purpose and capabilities mostly align with Travis CI Enterprise worker administration, and the RabbitMQ credential use is proportionate. However, the install instructions use a deprecated apt-key pattern and a Travis-branded package source that does not clearly match the current official documented installer flow, creating medium supply-chain trust risk rather than clear malicious behavior.
Confidence: 87%Severity: 56%
Audit Metadata