cloud-devops
Warn
Audited by Socket on Apr 1, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the bundle is coherent as a DevOps workflow, but its real footprint is transitive delegation to many unverified third-party skills, including penetration-testing capabilities. The main risk is trust expansion beyond the reviewed document, not direct malware behavior in this bundle itself.
Confidence: 86%Severity: 74%
Audit Metadata