catc-troubleshoot
Warn
Audited by Socket on Mar 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The troubleshooting purpose is coherent, but the skill’s real trust boundary is not Cisco Catalyst Center or pyATS directly—it is a set of unverifiable local MCP wrapper executables. Because the skill forwards live Catalyst Center credentials into those wrappers and also sends operational data through them, the install/execution trust and data-flow integrity are not adequately established. This is a high security-risk skill due to credential forwarding to unverifiable executables, even without clear evidence of confirmed malware.
Confidence: 88%Severity: 84%
Audit Metadata