agent-onboarding

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is largely coherent with its stated Bright Data onboarding purpose and routes credentials to official Bright Data domains, not unrelated intermediaries. However, it combines an official-but-risky curl|bash installer, credential forwarding into vendor tooling, web-content ingestion for coding agents, hosted MCP token use, and transitive installation of additional skills, making it higher risk than a simple documentation/onboarding skill.

Confidence: 88%Severity: 58%
Audit Metadata
Analyzed At
Sep 16, 2026, 12:46 PM
Package URL
pkg:socket/skills-sh/brightdata%2Fskills%2Fagent-onboarding%2F@39989cf3772e73b9444cdead72d4003bc18f08e490b592bd942b2c89355731a0
Security Audit — socket — agent-onboarding