contract-metadata-extraction
Warn
Audited by Socket on May 20, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core ServiceNow data access and record updates fit contract metadata extraction, and there is no obvious credential theft or off-platform exfiltration. Risk is elevated because the skill includes arbitrary background-script execution, broad roles, and unnecessary Bash declaration, making its operational footprint wider than needed for a metadata extraction skill.
Confidence: 84%Severity: 56%
Audit Metadata