digitalocean

Warn

Audited by Socket on Sep 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s capabilities and credential needs are broadly consistent with DigitalOcean management, and there is no direct evidence of credential theft or third-party exfiltration. The main risk is trust opacity: the `skill` runtime and actual network endpoints are not verifiable from the provided artifact, while the skill can perform destructive infrastructure actions.

Confidence: 86%Severity: 56%
Audit Metadata
Analyzed At
Sep 30, 2026, 05:04 AM
Package URL
pkg:socket/skills-sh/kubiyabot%2Fskill%2Fdigitalocean%2F@9eb80227a75e705fb1da1c043dd91ea0c7135945a3a9c77716fffeffdace18a7