azure-devops

Warn

Audited by Socket on Jun 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s capabilities mostly match its Azure DevOps management purpose and use official Microsoft endpoints, so there is no strong exfiltration signal. Risk is driven by unverifiable local script provenance, broad admin actions, and credential use; this looks like a high-impact but plausibly legitimate integration rather than confirmed malware.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Jun 22, 2026, 01:47 PM
Package URL
pkg:socket/skills-sh/sanjay3290%2Fazure-devops-skill%2Fazure-devops%2F@e54be494f687e88a881f0c93631296e30f9e76c5
Security Audit — socket — azure-devops