f5-troubleshoot
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the troubleshooting purpose is legitimate and the F5-focused commands are proportionate, but the skill’s actual trust boundary is weak because its core MCP executables are unspecified, unverifiable local scripts that receive F5 credentials and may make network calls. The write/delete capabilities are consistent with remediation, yet the undocumented provenance of `MCP_CALL`/`F5_MCP_SCRIPT` and the extra GAIT export path make this a high security-risk skill rather than a benign documentation-only guide.
Confidence: 85%Severity: 84%
Audit Metadata