cloud-security
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s purpose broadly matches cloud security work, but its actual footprint is heavy: it instructs the agent to install and use numerous external audit and offensive-security CLIs with live cloud credentials. Most install paths appear plausibly official, which argues against confirmed malware, but the unpinned multi-tool chain and weak provenance for some packages make the trust and credential-forwarding scope disproportionate for a thin router skill.
Confidence: 90%Severity: 82%
Audit Metadata