abridge-ci-integration

Warn

Audited by Socket on Sep 11, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is mostly coherent for healthcare CI and uses standard GitHub Actions patterns, but it forwards sensitive sandbox credentials to a fully configurable ABRIDGE_SANDBOX_URL with no domain allowlist or official endpoint validation. This is not confirmed malware, but the data-flow design creates medium risk because a mis-set secret could route credentials to an unintended host.

Confidence: 89%Severity: 58%
Audit Metadata
Analyzed At
Sep 11, 2026, 01:13 AM
Package URL
pkg:socket/skills-sh/jeremylongshore%2Ftons-of-skills-marketplace%2Fabridge-ci-integration%2F@c10f58f490de1c5804cae83c9fa0a176940ac26102e5a98f98b6682ac5a4ffaa