skills/ciciliaeth/claude-skills/terraform-patterns/Socket

terraform-patterns

Warn

Audited by Socket on Aug 21, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's Terraform-review purpose is broadly coherent and there is no clear credential theft or exfiltration behavior, but install provenance is muddied by repo-owner mismatch, missing referenced scripts, and transitive registry installation. This looks more like a supply-chain trust problem than malware.

Confidence: 83%Severity: 58%

Audit Metadata

Analyzed At

Aug 21, 2026, 05:06 AM

Package URL

pkg:socket/skills-sh/ciciliaeth%2Fclaude-skills%2Fterraform-patterns%2F@d15c1034dca02e2142ffb3fe23e22007179b37998ae4cfb3966de7671a7baefb