evernote-deploy-integration

Warn

Audited by Socket on Sep 9, 2026

1 alert found:

Anomaly
AnomalyLOW
references/implementation-guide.md

No clear malicious behavior is present. The code describes conventional deployment workflows, but it contains meaningful security risks: publicly exposed services, unauthenticated Cloud Run access, mutable latest image tags, broad Lambda secret permissions, and potentially exposed credentials in infrastructure state or rendered Kubernetes manifests. These issues warrant remediation and review of the surrounding network, authentication, CI permissions, and secret-management configuration.

Confidence: 97%Severity: 68%
Audit Metadata
Analyzed At
Sep 9, 2026, 03:47 AM
Package URL
pkg:socket/skills-sh/jeremylongshore%2Ftons-of-skills-marketplace%2Fevernote-deploy-integration%2F@aded47039c3558cb531974c91dde0c5e1ddf4bfd9b9d201c92e676f1ed2aee00