create-swag-config
Warn
Audited by Socket on Jun 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s capabilities broadly match SWAG config management, but it defaults to a custom third-party MCP service and personal-container namespace rather than direct local administration or an official vendor endpoint. That creates meaningful supply-chain and remote-control-plane risk, though there is no clear evidence of credential theft or overtly malicious behavior.
Confidence: 82%Severity: 64%
Audit Metadata