expanso-fan-out-s3

Warn

Audited by Socket on Jul 26, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the high-level purpose is coherent for a data-routing skill, but install instructions and binary naming are inconsistent with current official documentation, and the real credential/data flows are hidden in missing files. This looks more like an incomplete or poorly documented skill than confirmed malware, but it should not be trusted without reviewing pipeline.yaml and the local scripts.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Jul 26, 2026, 05:45 AM
Package URL
pkg:socket/skills-sh/expanso-io%2Fskills.expanso.io%2Fexpanso-fan-out-s3%2F@523288ea29ef63771baa062064f58a94f05969aa4266598b3f72d13116d59a65
Security Audit — socket — expanso-fan-out-s3