aap-automation

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The functional scope matches an AAP automation skill, but the trust model does not. A Red Hat-branded infrastructure-control skill routes a write-scoped AAP token into code cloned from an unrelated personal GitHub repo, with no strong same-org provenance or verified release trail. Capability alignment is reasonable, but install trust and credential forwarding make this high risk.

Confidence: 91%Severity: 84%
Audit Metadata
Analyzed At
Oct 2, 2026, 03:56 PM
Package URL
pkg:socket/skills-sh/automateyournetwork%2Fnetclaw%2Faap-automation%2F@62db2b5c509a55de13683592c3f027fa6169a116fd08ed1a81df1476974ce0a3