skills/majiayu000/claude-skill-registry/iac-scanner/Socket

iac-scanner

Warn

Audited by Socket on Apr 25, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s stated purpose and scanner choices are coherent and proportionate, and tfsec/Checkov installation paths are official. However, the unverified, unpinned `npx iac-scanner` wrapper is the core trust concern; it introduces medium-high supply-chain risk despite otherwise benign scope and local data flow.

Confidence: 84%Severity: 72%

Audit Metadata

Analyzed At

Apr 25, 2026, 04:41 PM

Package URL

pkg:socket/skills-sh/majiayu000%2Fclaude-skill-registry%2Fiac-scanner%2F@3b140f4097b4c3ceac4db3e6a5e31a6e98ac0718