skills/aradotso/devtools-skills/testsprite-ai-testing-cli/Socket

testsprite-ai-testing-cli

Warn

Audited by Socket on Jun 13, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core testing and artifact flows are broadly consistent with a legitimate cloud testing CLI, and installation via the official npm scope appears proportionate. Risk comes from the skill's transitive agent-install behavior, plaintext credential-file storage, autonomous live-app testing workflows, and the mismatch between the stated skill publisher (ara.so) and the actual CLI owner (TestSprite).

Confidence: 100%Severity: 60%

Audit Metadata

Analyzed At

Jun 13, 2026, 10:05 AM

Package URL

pkg:socket/skills-sh/Aradotso%2Fdevtools-skills%2Ftestsprite-ai-testing-cli%2F@64472ad6db72c00b746485605b369e9fd9802588312807019648803aa406dbce