app-studio-build
Warn
Audited by Socket on Sep 16, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The skill's stated purpose and operations are broadly aligned: it builds Domo App Studio assets and layouts. The main concern is trust, not intent: the skill requires a `community-domo-cli` dependency whose official provenance is not established here, yet it is entrusted with all app creation and update actions against the user's Domo environment. That makes this skill suspicious rather than malicious, with elevated supply-chain risk from an opaque external CLI but no clear evidence of credential theft, exfiltration, or covert behavior in the skill text itself.
Confidence: 86%Severity: 74%
Audit Metadata