power-bi-retail-analytics-salespulse360

Warn

Audited by Socket on Oct 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s capabilities mostly fit a Power BI deployment/customization guide, and data flows stay on official Microsoft services. The main concern is install trust: it instructs cloning a personal GitHub repo that is not clearly tied to the stated publisher ara.so, creating a publisher-source mismatch. No confirmed malware, credential harvesting, or malicious exfiltration is evident.

Confidence: 87%Severity: 52%
Audit Metadata
Analyzed At
Oct 1, 2026, 01:37 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fdata-skills%2Fpower-bi-retail-analytics-salespulse360%2F@d3c780c0e4051271dfc761ad7eb21bce7b8cbd6174666b934d3be9aba56ddcc2
Security Audit — socket — power-bi-retail-analytics-salespulse360