aap-automation
Warn
Audited by Socket on Oct 2, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The functional scope matches an AAP automation skill, but the trust model does not. A Red Hat-branded infrastructure-control skill routes a write-scoped AAP token into code cloned from an unrelated personal GitHub repo, with no strong same-org provenance or verified release trail. Capability alignment is reasonable, but install trust and credential forwarding make this high risk.
Confidence: 91%Severity: 84%
Audit Metadata