cloudflare

Warn

Audited by Socket on Oct 3, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s capabilities broadly match Cloudflare administration and its network target is the official Cloudflare API, but it is a third-party shell-script bundle that reads powerful Cloudflare credentials from a plaintext local file and supports legacy Global API Keys. Risk is driven more by credential handling and operational impact than by confirmed malicious behavior.

Confidence: 88%Severity: 68%
Audit Metadata
Analyzed At
Oct 3, 2026, 10:11 AM
Package URL
pkg:socket/skills-sh/jakenuts%2Fagent-skills%2Fcloudflare%2F@c2d2b1a14eda8879f22959bc80fee0c4e43a7f2b661c9e4b1267571afd422797