domo-data-generator

Warn

Audited by Socket on Apr 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

The skill's capabilities mostly match its stated purpose: generating fake business datasets and uploading them to Domo. Main concerns are trust and endpoint integrity, not clear malicious intent: it depends on a personal GitHub repo, forwards sensitive Domo credentials to that code, and allows a configurable API host plus unattended cron uploads. Overall this is coherent but should be treated as medium risk rather than fully benign.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Apr 13, 2026, 05:44 PM
Package URL
pkg:socket/skills-sh/stahura%2Fdomo-ai-vibe-rules%2Fdomo-data-generator%2F@03d84e9007edc69503ea204b845d28653ba2ffcd