workflow

Warn

Audited by Socket on Jul 7, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is internally coherent as an autonomous workflow orchestrator, but it grants broad execution and orchestration power, including deployment, infrastructure changes, and security-audit actions. There is no clear credential theft or malicious exfiltration, yet the autonomy and Bash-enabled real-world impact make it a medium-to-high operational risk skill.

Confidence: 87%Severity: 68%
Audit Metadata
Analyzed At
Jul 7, 2026, 12:07 AM
Package URL
pkg:socket/skills-sh/softspark%2Fai-toolkit%2Fworkflow%2F@8145d0442ab4e668de1fd4ddcec7de84257de425f1396c7d1d5ebc92680e2ce4
Security Audit — socket — workflow