skills/secondsky/sap-skills/sap-sac-scripting/Socket

sap-sac-scripting

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s main documentation and SAC scripting guidance are coherent and mostly benign, but it also directs users to install a third-party MCP server from a non-SAP GitHub fork and provide SAC OAuth credentials to it. The commit pin and source-build steps improve trust, yet credential forwarding to third-party code keeps overall risk at medium.

Confidence: 86%Severity: 64%

Audit Metadata

Analyzed At

Sep 15, 2026, 07:30 AM

Package URL

pkg:socket/skills-sh/secondsky%2Fsap-skills%2Fsap-sac-scripting%2F@ee8b87923b7ebc8f36467b0c3ec4f64230a22942890089198ed581015a8dc240