pbip

Warn

Audited by Socket on May 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS due to install-trust and transitive-trust issues, not because of obvious malicious behavior. The core PBIP/PBIX guidance is purpose-aligned and mostly benign documentation, but the skill recommends installing an unverifiable third-party `pbir-cli` binary and loading additional skills, which expands risk beyond a simple format-reference skill.

Confidence: 87%Severity: 72%
Audit Metadata
Analyzed At
May 21, 2026, 09:58 AM
Package URL
pkg:socket/skills-sh/data-goblin%2Fpower-bi-agentic-development%2Fpbip%2F@2c8bcd048aa4b856c00a85fd05c0cfa4403154e6
Security Audit — socket — pbip