unified-ticket-fetcher

Warn

Audited by Socket on Jun 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The stated purpose is legitimate and the requested ticketing credentials broadly fit that purpose, but the real trust boundary is the unverifiable transitive skill `unified_task_tracker`, which would handle multi-provider authentication and API calls. This creates medium-high supply-chain and credential-routing risk despite otherwise coherent functionality.

Confidence: 87%Severity: 69%
Audit Metadata
Analyzed At
Jun 18, 2026, 12:04 PM
Package URL
pkg:socket/skills-sh/Knuckles-Team%2Funiversal-skills%2Funified-ticket-fetcher%2F@2d6cb10e976f7748d8496c4ba3e31131f5c69fa967a3eeea39c6d139b6ed569f
Security Audit — socket — unified-ticket-fetcher