skills/microsoft/power-platform-skills/build-flow/Socket

build-flow

Warn

Audited by Socket on Jul 10, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s core purpose aligns with Power Automate administration, but it relies on an unverifiable FlowAgent MCP intermediary with broad authenticated tenant control. The main risk is supply-chain and credential/token exposure through that unverified server, compounded by autonomous high-impact actions like publish, delete, and desktop-flow execution.

Confidence: 84%Severity: 82%

Audit Metadata

Analyzed At

Jul 10, 2026, 10:57 AM

Package URL

pkg:socket/skills-sh/microsoft%2Fpower-platform-skills%2Fbuild-flow%2F@1a4840ddaf4e5625afa31a13161a89b3230445b6dde1cf482208e8ba8766e5af