terraform-iac-data-engineering

Warn

Audited by Socket on Jun 12, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s capabilities broadly match its stated Terraform/AWS purpose, and credentials flow to official AWS tooling rather than a proxy. However, trust is weakened because the skill is published by `ara.so` yet instructs cloning a separate personal GitHub repo, and it includes download-execute install steps without integrity verification plus high-impact infrastructure actions.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 12, 2026, 08:22 PM
Package URL
pkg:socket/skills-sh/Aradotso%2Fdata-skills%2Fterraform-iac-data-engineering%2F@114669f9676f0b14576f12df4feb5f054c2b4fdfe0bcc7df5427a8811a7db67f
Security Audit — socket — terraform-iac-data-engineering