unified-ticket-fetcher
Warn
Audited by Socket on Jun 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The stated purpose is legitimate and the requested ticketing credentials broadly fit that purpose, but the real trust boundary is the unverifiable transitive skill `unified_task_tracker`, which would handle multi-provider authentication and API calls. This creates medium-high supply-chain and credential-routing risk despite otherwise coherent functionality.
Confidence: 87%Severity: 69%
Audit Metadata