data360-harmonize

Warn

Audited by Socket on Aug 7, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the task scope is coherent for Salesforce Data Cloud harmonization, but the skill’s core dependency is an unverifiable external community CLI plugin. The main concern is install/runtime trust and possible credential forwarding through third-party plugin code, not overt malware behavior in the markdown itself.

Confidence: 85%Severity: 78%
Audit Metadata
Analyzed At
Aug 7, 2026, 01:01 PM
Package URL
pkg:socket/skills-sh/forcedotcom%2Fsf-skills%2Fdata360-harmonize%2F@2e5bd59c5deadf25745976a82e82beee13c326fd688fb27d03e21669bf078464
Security Audit — socket — data360-harmonize