Skills
skills/aradotso/security-skills/iac-security-scan-skills/Socket

iac-security-scan-skills

Warn

Audited by Socket on Jun 12, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's scanning behavior and local report generation mostly match its stated IaC security purpose, and no direct exfiltration or credential-forwarding is described. However, install trust is only moderate because the skill is cloned from a personal GitHub repo while branded as ara.so, with limited verifiable release provenance and explicit agent-skill installation steps.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 12, 2026, 08:53 PM
Package URL
pkg:socket/skills-sh/Aradotso%2Fsecurity-skills%2Fiac-security-scan-skills%2F@9a1f30a1f9c24fc01e5dfeba82abdb4de5e561a3018b63f753b8c784d060f1c2
Security Audit — socket — iac-security-scan-skills