buildkite
Warn
Audited by Socket on Oct 6, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s stated CI/CD capabilities are broadly consistent with its purpose and official Buildkite endpoints, but trust is weakened by the undisclosed local `buildkite` wrapper and its auto-running `scripts/setup`. No clear malicious data flow is shown, yet the hidden setup/install behavior and operational ability to trigger or cancel builds make this a medium-risk skill pending review of the wrapper and setup script.
Confidence: 84%Severity: 56%
Audit Metadata