enterprise-readiness

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Anomaly
AnomalyLOW
references/quick-start-guide.md

The content is a benign quick-start documentation template, not malware. The principal security risk is the suggested CI workflow that extracts arbitrary shell content from documentation and executes it, creating a potential command-injection and supply-chain pathway. Remote installer execution and the mutable Docker latest tag are additional security weaknesses. The fragment should be treated as documentation with a security warning rather than malicious code.

Confidence: 99%Severity: 52%
Audit Metadata
Analyzed At
Oct 9, 2026, 10:27 AM
Package URL
pkg:socket/skills-sh/netresearch%2Fenterprise-readiness-skill%2Fenterprise-readiness%2F@956748c8bbe0e23332d1471e78de52678f0cb4afde766a36cdbfae20e9f46b1b