iam-helper-for-troubleshooting

Warn

Audited by Socket on Sep 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core purpose and Google endpoint are coherent for an IAM troubleshooting skill, and the guardrails are strong. The main concern is install/execution trust and data-flow integrity: the example extracts a Google OAuth token and hands it to an npm-fetched MCP client wrapper that is not the documented Google connection method, creating unnecessary credential exposure to third-party code.

Confidence: 90%Severity: 52%
Audit Metadata
Analyzed At
Sep 21, 2026, 10:49 AM
Package URL
pkg:socket/skills-sh/google%2Fskills%2Fiam-helper-for-troubleshooting%2F@5faa24df52da3e9f1363472e394e5bfb91146149188879617e81ad08d16d8dd4
Security Audit — socket — iam-helper-for-troubleshooting