skills/jaganpro/sf-skills/sf-datacloud-segment/Socket

sf-datacloud-segment

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s commands fit its stated Salesforce Data Cloud segment purpose, but its required community `sf data360` CLI/runtime is not clearly official or verifiable from the skill and likely receives Salesforce auth context to perform mutations. The main issue is supply-chain and credential-forwarding risk, not clear malicious intent.

Confidence: 87%Severity: 82%

Audit Metadata

Analyzed At

Sep 14, 2026, 05:48 PM

Package URL

pkg:socket/skills-sh/jaganpro%2Fsf-skills%2Fsf-datacloud-segment%2F@6047488541d03bcfc7b918fee92dc3347a93cb0c7dab4f36792ca38e1a6ed84c