ops-revenue

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The main AWS and Shopify data flows fit the skill’s finance-reporting purpose and go to official endpoints, but the skill also relies on an unverifiable local executable (ops-external) and a config-driven vault command. That combination makes the actual execution footprint broader and less trustworthy than a straightforward reporting skill.

Confidence: 89%Severity: 82%
Audit Metadata
Analyzed At
Oct 8, 2026, 08:57 PM
Package URL
pkg:socket/skills-sh/davepoon%2Fbuildwithclaude%2Fops-revenue%2F@e9b615f3a1854ec3c015029ee18154e5311eb67c387e10b4fffc4b8af366eda3