clicd-virtualization-panel

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The functionality broadly matches a virtualization-management skill, but the installation trust story is weak: it pipes a raw GitHub script to sudo from a different org than the listed publisher, with no verifiable same-org relationship in the provided evidence. The requested host-level privileges are proportionate to virtualization management, yet the combination of privileged install, network reconfiguration, and insecure default HTTP exposure makes this a high-risk skill to run without independent source verification.

Confidence: 88%Severity: 74%
Audit Metadata
Analyzed At
Oct 8, 2026, 11:46 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fdevtools-skills%2Fclicd-virtualization-panel%2F@680fa31a5c0a475972eaddc91dffcd3568bd975260c11eceae61cc20c7ffa40f