spatie-ops
Warn
Audited by Socket on Oct 11, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s purpose matches its infrastructure-management capabilities and its network targets are official provider APIs, not third-party proxies. However, it centralizes high-value credentials from 1Password and Cloud CLI into a private local helper with unverifiable provenance; that black-box credential forwarding makes the overall footprint higher risk than a normal documented integration.
Confidence: 87%Severity: 82%
Audit Metadata