skills/opensearch-project/opensearch-agent-skills/opensearch-launchpad/Socket

opensearch-launchpad

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s core OpenSearch/AWS functionality matches its stated purpose, but it materially expands trust by executing unpinned third-party MCP packages, forwarding credentials into them, disabling TLS verification in a documented path, and chaining to other skills. This looks more like risky workflow composition than confirmed malware.

Confidence: 89%Severity: 78%

Audit Metadata

Analyzed At

Sep 15, 2026, 07:18 AM

Package URL

pkg:socket/skills-sh/opensearch-project%2Fopensearch-agent-skills%2Fopensearch-launchpad%2F@ad9b53e0a0a6611944a85c42427b6bf914ac1d6ef8453b3a7ff470440c51a4a1