clicd-virtualization-panel
Warn
Audited by Socket on Oct 8, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The functionality broadly matches a virtualization-management skill, but the installation trust story is weak: it pipes a raw GitHub script to sudo from a different org than the listed publisher, with no verifiable same-org relationship in the provided evidence. The requested host-level privileges are proportionate to virtualization management, yet the combination of privileged install, network reconfiguration, and insecure default HTTP exposure makes this a high-risk skill to run without independent source verification.
Confidence: 88%Severity: 74%
Audit Metadata