power-automate-build

Warn

Audited by Socket on Apr 26, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's capabilities broadly match its stated purpose, but it routes Power Automate administration and testing through FlowStudio's third-party MCP service and forwards a service token to that intermediary. This is not clearly malicious, yet the off-platform credential and data flow plus live-action automation make it medium risk compared with a direct Microsoft integration.

Confidence: 86%Severity: 64%
Audit Metadata
Analyzed At
Apr 26, 2026, 10:30 AM
Package URL
pkg:socket/skills-sh/ninihen1%2Fpower-automate-mcp-skills%2Fpower-automate-build%2F@50a048d8e8141fef8588e1d05e97e27e6f8b1e0e
Security Audit — socket — power-automate-build