spatie-ops

Warn

Audited by Socket on Oct 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s purpose matches its infrastructure-management capabilities and its network targets are official provider APIs, not third-party proxies. However, it centralizes high-value credentials from 1Password and Cloud CLI into a private local helper with unverifiable provenance; that black-box credential forwarding makes the overall footprint higher risk than a normal documented integration.

Confidence: 87%Severity: 82%
Audit Metadata
Analyzed At
Oct 11, 2026, 03:27 AM
Package URL
pkg:socket/skills-sh/freekmurze%2Fdotfiles%2Fspatie-ops%2F@de7e1d8f580d7e8ceecfe39c0b0b1bece712e9aff94b2f4bb29c71ab02fae1f3