azure-devops
Warn
Audited by Socket on Sep 30, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is internally consistent with its stated purpose as an Apideck proxy connector, and there is no installer or obvious malware behavior. However, it deliberately places a third-party intermediary between the user and Azure DevOps, with credentials stored in Apideck Vault and all API calls routed through Apideck instead of Microsoft's official endpoints, creating a meaningful trust and data-flow risk.
Confidence: 91%Severity: 58%
Audit Metadata