skills/maddhruv/absolute/ci-cd-pipelines/Socket

ci-cd-pipelines

Warn

Audited by Socket on Mar 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

The skill is mostly a benign CI/CD documentation guide, but the companion-check behavior is inconsistent with that purpose. Its main risk is instructing the agent to inspect local skill directories and offer/install additional third-party skills through an unpinned `npx` command, creating a transitive supply-chain trust issue. Overall verdict: SUSPICIOUS.

Confidence: 87%Severity: 58%

Audit Metadata

Analyzed At

Mar 23, 2026, 01:04 PM

Package URL

pkg:socket/skills-sh/AbsolutelySkilled%2FAbsolutelySkilled%2Fci-cd-pipelines%2F@c2c705b29b83d7bea1b36912df886d7e35c4c31a