iam-helper-for-troubleshooting
Warn
Audited by Socket on Sep 21, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The core purpose and Google endpoint are coherent for an IAM troubleshooting skill, and the guardrails are strong. The main concern is install/execution trust and data-flow integrity: the example extracts a Google OAuth token and hands it to an npm-fetched MCP client wrapper that is not the documented Google connection method, creating unnecessary credential exposure to third-party code.
Confidence: 90%Severity: 52%
Audit Metadata