aci-fabric-audit

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The ACI audit purpose is coherent, but the skill delegates core access to unverifiable env-supplied MCP scripts and forwards APIC credentials into them, which is disproportionate trust for a credentialed infrastructure audit. Optional GAIT logging and runtime `npx` execution add more risk, though the draw.io package itself appears official.

Confidence: 91%Severity: 84%
Audit Metadata
Analyzed At
Oct 2, 2026, 03:56 PM
Package URL
pkg:socket/skills-sh/automateyournetwork%2Fnetclaw%2Faci-fabric-audit%2F@6a425dd3e1514e44480540a847b038f275629a421aec865df3e8b82584625b39