init-linux-cloud-agent-env
Warn
Audited by Socket on Sep 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core GitHub/Vercel/Neon MCP setup is broadly aligned with the stated cloud-agent purpose, but the skill expands trust to a weakly verifiable workers.dev MCP endpoint and to transitive external skills. Credential use is proportionate for official MCP servers, yet routing skill discovery through an unofficial-looking third-party endpoint and enabling autonomous GitHub actions make the overall footprint higher-risk than a normal setup guide.
Confidence: 84%Severity: 64%
Audit Metadata