skills/automateyournetwork/netclaw/arista-cvp/Socket

arista-cvp

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: The skill’s capabilities fit CVP automation, but trust and transport protections are weak. Main issues are executing an unofficial community MCP server from GitHub, runtime-resolved dependencies, and especially disabled TLS verification while handling a CVP service token.

Confidence: 89%Severity: 82%

Audit Metadata

Analyzed At

Oct 2, 2026, 03:56 PM

Package URL

pkg:socket/skills-sh/automateyournetwork%2Fnetclaw%2Farista-cvp%2F@6ad22d9ff0815badd89f8f067ca12570d5f6c81576f24808a42452d968da0699