travis-worker

Warn

Audited by Socket on Jul 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s purpose and capabilities mostly align with Travis CI Enterprise worker administration, and the RabbitMQ credential use is proportionate. However, the install instructions use a deprecated apt-key pattern and a Travis-branded package source that does not clearly match the current official documented installer flow, creating medium supply-chain trust risk rather than clear malicious behavior.

Confidence: 87%Severity: 56%
Audit Metadata
Analyzed At
Jul 8, 2026, 04:20 PM
Package URL
pkg:socket/skills-sh/alisonaquinas%2Fllm-ci-dev%2Ftravis-worker%2F@8beb86e00d722b0cee4d037331a2aa23823c019aac78c9b930d6af67ad25f9a8
Security Audit — socket — travis-worker