azure-devops

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's install path is relatively trustworthy and aligned with the publisher, but the core integration proxies Azure DevOps auth and data through Membrane infrastructure instead of official Microsoft-only endpoints. That third-party mediation is disclosed and purpose-related, so this is not confirmed malware, but it materially increases trust and credential-routing risk beyond a direct Azure DevOps skill.

Confidence: 86%Severity: 59%
Audit Metadata
Analyzed At
Apr 28, 2026, 11:26 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fazure-devops%2F@1434774e40e46fbcf014b52b60774d5830c07dfd
Security Audit — socket — azure-devops