digitalocean
Warn
Audited by Socket on Sep 30, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s capabilities and credential needs are broadly consistent with DigitalOcean management, and there is no direct evidence of credential theft or third-party exfiltration. The main risk is trust opacity: the `skill` runtime and actual network endpoints are not verifiable from the provided artifact, while the skill can perform destructive infrastructure actions.
Confidence: 86%Severity: 56%
Audit Metadata