mdm-device-management

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's capabilities mostly match its stated MDM purpose and data flows go to official vendor endpoints, but it grants high-impact administrative actions and uses risky install patterns, especially curl-to-shell and an unpinned internal Brewfile fetch. This is not confirmed malware, but it is a medium-risk skill that should only be used with strong per-action approval and trusted internal infrastructure.

Confidence: 89%Severity: 56%
Audit Metadata
Analyzed At
Sep 15, 2026, 07:07 AM
Package URL
pkg:socket/skills-sh/bagelhole%2Fdevops-security-agent-skills%2Fmdm-device-management%2F@191a8ea511551a2aae86d3c165bbd03f311b01762ee99a133efa67a7b0de04a9