abridge-ci-integration
Warn
Audited by Socket on Sep 11, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill is mostly coherent for healthcare CI and uses standard GitHub Actions patterns, but it forwards sensitive sandbox credentials to a fully configurable ABRIDGE_SANDBOX_URL with no domain allowlist or official endpoint validation. This is not confirmed malware, but the data-flow design creates medium risk because a mis-set secret could route credentials to an unintended host.
Confidence: 89%Severity: 58%
Audit Metadata