skills/stahura/domo-ai-vibe-rules/fileset-cli/Socket

fileset-cli

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s capabilities align with FileSets management, but its trust model is weak: it relies on a separate setup skill and a community/personal CLI with no strong evidence of official Domo ownership or verifiable release hygiene. The main risk is supply-chain and credential forwarding to a non-official tool, not clear malicious intent in the skill itself.

Confidence: 87%Severity: 80%

Audit Metadata

Analyzed At

Sep 16, 2026, 06:15 PM

Package URL

pkg:socket/skills-sh/stahura%2Fdomo-ai-vibe-rules%2Ffileset-cli%2F@0bc360be49350f52940e2f51e72b92527615662edf1cc8cf0a804f39eeb67a2c