servicenow

Warn

Audited by Socket on Apr 27, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

The skill is internally consistent with its stated purpose as an Apideck-managed ServiceNow proxy connector, but the actual data flow is a third-party mediation layer rather than direct ServiceNow access. That makes it higher-risk than a direct official API integration, though not malicious: trust is concentrated in Apideck for credential storage, token refresh, and request forwarding.

Confidence: 89%Severity: 62%
Audit Metadata
Analyzed At
Apr 27, 2026, 11:28 AM
Package URL
pkg:socket/skills-sh/apideck-libraries%2Fapi-skills%2Fservicenow%2F@24ed6ba0b53380626bc4d6bc3d983f402e0fb04f
Security Audit — socket — servicenow