skills/ninihen1/power-automate-mcp-skills/power-automate-mcp/Socket

power-automate-mcp

Warn

Audited by Socket on Apr 26, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is broadly aligned with Power Automate administration, but it routes sensitive Power Automate data and an API token through FlowStudio’s third-party MCP service instead of official Microsoft endpoints. Main risk is credential/data exposure plus high-impact operational actions through an intermediary, not malware or deceptive install behavior.

Confidence: 90%Severity: 64%

Audit Metadata

Analyzed At

Apr 26, 2026, 10:30 AM

Package URL

pkg:socket/skills-sh/ninihen1%2Fpower-automate-mcp-skills%2Fpower-automate-mcp%2F@0560c1bbd57fb8d91c89072dcce7090c38323aaa