cloud-devops
Warn
Audited by Socket on Oct 28, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the bundle itself is mostly orchestration text, but it expands the agent's footprint by instructing use of many unverified third-party skills, including penetration-testing components, for high-impact cloud actions. No direct exfiltration or malicious payload appears in this file, yet the transitive trust chain and real-world operational scope make the skill medium-high risk.
Confidence: 86%Severity: 76%
Audit Metadata