daytona-seeded-cloud-demo

Warn

Audited by Socket on Jul 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is broadly aligned with its demo-provisioning purpose, and the external CLI appears to be the official Daytona tool, so this is not confirmed malware. However, it performs real infrastructure actions, embeds hardcoded secrets, starts a persistent background keepalive, and intentionally returns reusable credentials, making the scope moderately risky for an AI skill.

Confidence: 83%Severity: 56%
Audit Metadata
Analyzed At
Jul 28, 2026, 12:28 PM
Package URL
pkg:socket/skills-sh/different-ai%2Fopenwork%2Fdaytona-seeded-cloud-demo%2F@43342773b896f08b0e0b2ea00e2ee36f5115c9e5c69bf83c73d5cd28f1db08f4
Security Audit — socket — daytona-seeded-cloud-demo