azure-finops

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s stated purpose and read-only Azure analysis workflow are coherent, and no clear exfiltration or malicious behavior is shown. The main issue is install/execution trust: the fallback `uv run python -m azure_finops` references a module whose exact provenance is not established, and available evidence points to a third-party similarly named package rather than a clearly same-org official source.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Sep 18, 2026, 06:12 PM
Package URL
pkg:socket/skills-sh/julianobarbosa%2Fclaude-code-skills%2Fazure-finops%2F@e50d7d7e0e7fb0b5bf63021d9e30599cf3a271b4efa252f6a86851045d894104