skills/shhac/agent-skills/agent-dd/Socket

agent-dd

Warn

Audited by Socket on Jul 31, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s purpose and actions are mostly aligned with Datadog triage, but it relies on an unverifiable `agent-dd` binary that receives Datadog credentials and can make production alerting changes. The mismatch with Datadog’s documented official tooling materially weakens install trust and data-flow integrity.

Confidence: 87%Severity: 84%

Audit Metadata

Analyzed At

Jul 31, 2026, 04:55 PM

Package URL

pkg:socket/skills-sh/shhac%2Fagent-skills%2Fagent-dd%2F@56074b81d35f9ba08b9c4281f462d185a4c470f828e6e51430e8b54171506770