skills/robzolkos/rollbar-cli/rollbar/Socket

rollbar

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s purpose and permissions are mostly coherent, but trust in the external `rollbar` CLI is under-specified. Because the skill forwards Rollbar access tokens to whichever local CLI is installed, ambiguous provenance creates meaningful supply-chain and credential-forwarding risk even though the intended data flow to Rollbar is legitimate.

Confidence: 85%Severity: 72%

Audit Metadata

Analyzed At

Sep 22, 2026, 05:21 AM

Package URL

pkg:socket/skills-sh/robzolkos%2Frollbar-cli%2Frollbar%2F@a7e127720b4159b7069374d692edf1d6eadbe2818da641fb9789e25d0dfded96