cluster-topo-viz

Warn

Audited by Socket on Oct 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core SSH/SCP topology-collection workflow is coherent with the skill’s purpose, so this is not fundamentally incompatible or overtly malicious. However, the skill reaches into kubeconfig locations, uses root SSH, and explicitly forwards a user password to sshpass while disabling StrictHostKeyChecking; those choices are broader and riskier than necessary for a visualization skill and create real credential-handling and MITM concerns.

Confidence: 89%Severity: 58%
Audit Metadata
Analyzed At
Oct 16, 2026, 10:44 AM
Package URL
pkg:socket/skills-sh/peachest%2Fskills%2Fcluster-topo-viz%2F@475f65030242a7672de40e6695a7fe044b24c7f12642a602bf29905228d889ed