chaos-engineering

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
references/fault-injection.md

The code is consistent with legitimate chaos-engineering and resilience-testing use. It contains powerful destructive operations that can disrupt production services, exhaust host resources, and alter network behavior, especially through the production LitmusChaos target, broad service-account privileges, unattended CI execution, and the 0.0.0.0 Toxiproxy listener. No malware, data theft, persistence, or obfuscated payload is identified. Execution should be restricted to authorized environments with least-privilege credentials, network isolation, automatic cleanup, and immutable CI action pinning.

Confidence: 98%Severity: 72%
Audit Metadata
Analyzed At
Sep 14, 2026, 07:22 PM
Package URL
pkg:socket/skills-sh/petrkindlmann%2Fqa-skills%2Fchaos-engineering%2F@9ff2e4c852501a1b7779eb4ca85451d71c60e7eac0b4b16cba6e6734a89c18b0