assuredworkloads-frameworks-author

Warn

Audited by Socket on Oct 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's overall purpose is coherent and uses official Google tooling, so it is not malware-like. However, it authorizes autonomous write actions in a live GCP organization and explicitly tells the agent to perform some checks silently, which raises meaningful operational risk despite otherwise legitimate data flows.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Oct 19, 2026, 06:40 PM
Package URL
pkg:socket/skills-sh/google%2Fskills%2Fassuredworkloads-frameworks-author%2F@09e9d3b294a610b8ad25eaf95f07c764eaf3e5c29a619f9c24869d58263669da