init-linux-cloud-agent-env

Warn

Audited by Socket on Sep 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core GitHub/Vercel/Neon MCP setup is broadly aligned with the stated cloud-agent purpose, but the skill expands trust to a weakly verifiable workers.dev MCP endpoint and to transitive external skills. Credential use is proportionate for official MCP servers, yet routing skill discovery through an unofficial-looking third-party endpoint and enabling autonomous GitHub actions make the overall footprint higher-risk than a normal setup guide.

Confidence: 84%Severity: 64%
Audit Metadata
Analyzed At
Sep 29, 2026, 05:49 PM
Package URL
pkg:socket/skills-sh/ruan-cat%2Fmonorepo%2Finit-linux-cloud-agent-env%2F@b2bf0b07f02df746012d9b2741c1ddad5992bbb44dbd0830f24a2d3036fdd9d2