inttegro-resolve-customer-case
Warn
Audited by Socket on Sep 13, 2026
1 alert found:
SecuritySecurityagents/openai.yaml
MEDIUMSecurityMEDIUM
agents/openai.yaml
No direct malware or obfuscated code is evident. The configuration presents a significant supply-chain and authorization risk because it connects to an external authenticated MCP server with sensitive payment, refund, messaging, and customer-data capabilities, while allowing implicit invocation. The endpoint and tool permissions should be independently trusted, restricted, monitored, and protected by explicit confirmation for consequential actions.
Confidence: 97%Severity: 72%
Audit Metadata