skills/codeartsagent/codeartsskills/sdlc-agentic-pipeline/Socket

sdlc-agentic-pipeline

Warn

Audited by Socket on Jul 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s broad SDLC/deployment scope mostly matches its stated purpose, but it enables high-impact autonomous actions and transitive skill installation while deferring critical onboarding, secret, and SSH behavior to unreviewed referenced files. Main concern is workflow authority plus unverifiable downstream setup, not confirmed malware.

Confidence: 81%Severity: 67%

Audit Metadata

Analyzed At

Jul 28, 2026, 06:47 PM

Package URL

pkg:socket/skills-sh/codeartsagent%2Fcodeartsskills%2Fsdlc-agentic-pipeline%2F@cf542805fec361f36ae7a7a60f2f6591b235985094ec3520fd35f54adfcb38e0