key-rotation-manager

Warn

Audited by Socket on Sep 9, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s stated purpose is generic key-rotation help, but its footprint is broader and poorly bounded. There is no malicious installer or explicit exfiltration path, yet unrestricted Bash(cmd:*) and pentesting/security-advanced framing are disproportionate to the minimal, vague functionality described.

Confidence: 88%Severity: 66%
Audit Metadata
Analyzed At
Sep 9, 2026, 03:50 AM
Package URL
pkg:socket/skills-sh/jeremylongshore%2Ftons-of-skills-marketplace%2Fkey-rotation-manager%2F@9ec6f1e081b54b2dc98261cc9bd361d0dabbf27b1a9ed3b39f08c3c635547eee