cloud-weaver-playbook

Warn

Audited by Socket on Sep 12, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the visible playbook is broadly consistent with a cloud-install assistant, but it acts mainly as a controller that automatically invokes several unseen skills and can take real infrastructure actions with credentials. No direct malware indicators or overt exfiltration appear in this file, yet the transitive-trust and autonomous cloud-management footprint make the overall skill medium risk until the companion skills are reviewed.

Confidence: 84%Severity: 57%
Audit Metadata
Analyzed At
Sep 12, 2026, 10:54 PM
Package URL
pkg:socket/skills-sh/fagnerlopes%2Fcloud-weaver%2Fcloud-weaver-playbook%2F@7af4fe67e798f21baaa22ebcecae8ee0b0f155a9d9d66e24c2aa08da4a963c22
Security Audit — socket — cloud-weaver-playbook