cluster-topo-viz
Warn
Audited by Socket on Oct 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The core SSH/SCP topology-collection workflow is coherent with the skill’s purpose, so this is not fundamentally incompatible or overtly malicious. However, the skill reaches into kubeconfig locations, uses root SSH, and explicitly forwards a user password to sshpass while disabling StrictHostKeyChecking; those choices are broader and riskier than necessary for a visualization skill and create real credential-handling and MITM concerns.
Confidence: 89%Severity: 58%
Audit Metadata