app-studio-build

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill's stated purpose and operations are broadly aligned: it builds Domo App Studio assets and layouts. The main concern is trust, not intent: the skill requires a `community-domo-cli` dependency whose official provenance is not established here, yet it is entrusted with all app creation and update actions against the user's Domo environment. That makes this skill suspicious rather than malicious, with elevated supply-chain risk from an opaque external CLI but no clear evidence of credential theft, exfiltration, or covert behavior in the skill text itself.

Confidence: 86%Severity: 74%
Audit Metadata
Analyzed At
Sep 16, 2026, 06:15 PM
Package URL
pkg:socket/skills-sh/stahura%2Fdomo-ai-vibe-rules%2Fapp-studio-build%2F@a146f23900c793efba851e429da3fef329e4e1818cdd66ae4d9c5aecb6c82425