aci-fabric-audit
Warn
Audited by Socket on Oct 2, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The ACI audit purpose is coherent, but the skill delegates core access to unverifiable env-supplied MCP scripts and forwards APIC credentials into them, which is disproportionate trust for a credentialed infrastructure audit. Optional GAIT logging and runtime `npx` execution add more risk, though the draw.io package itself appears official.
Confidence: 91%Severity: 84%
Audit Metadata