manyclaws-k8s

Warn

Audited by Socket on Jun 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: local namespace kubectl operations are proportionate to the stated Kubernetes purpose, but the 'friend' workflow introduces an unverified intermediary controller that receives a Bearer token and performs cross-namespace actions over internal HTTP. That data flow is not clearly documented or independently verifiable, so the skill is coherent in purpose but carries medium risk from credential forwarding and controller trust.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 17, 2026, 08:13 PM
Package URL
pkg:socket/skills-sh/Niach%2Fmanyclaws%2Fmanyclaws-k8s%2F@619be9e5fd061d23e8970cff5dbda95ab80d4b771c8b868facf7c50108d795cb
Security Audit — socket — manyclaws-k8s