use-ravion

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Security
SecurityMEDIUM
setup.md

This fragment appears to document a legitimate AWS onboarding and CI workflow, but it directs an agent to create or update privileged IAM resources from a remote CloudFormation template and execute an externally sourced MCP installer. Those actions present significant supply-chain and authorization risk unless the template, IAM trust/policies, CLI binaries, and MCP package are independently reviewed and verified. No direct malware or data-exfiltration behavior is visible in the supplied text.

Confidence: 93%Severity: 72%
Audit Metadata
Analyzed At
Sep 16, 2026, 06:33 PM
Package URL
pkg:socket/skills-sh/ravionhq%2Fskills%2Fuse-ravion%2F@8cfa9984ab789e40b7e4f378ab029b1d7c1e89626738e003e2b13f006825694b
Security Audit — socket — use-ravion