terraform-infrastructure

Warn

Audited by Socket on Jul 31, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the workflow’s stated Terraform purpose is coherent, but it relies on multiple unpinned, ambiguously sourced downstream skills. The main issue is transitive supply-chain trust, not direct malware behavior or explicit credential exfiltration in this file.

Confidence: 84%Severity: 64%
Audit Metadata
Analyzed At
Jul 31, 2026, 04:37 PM
Package URL
pkg:socket/skills-sh/sickn33%2Fagentic-awesome-skills%2Fterraform-infrastructure%2F@d655dd2e8cd87197074ebec290d4b6e12cb4296392d20e867ca240931b74ea68
Security Audit — socket — terraform-infrastructure