skills/stahura/domo-ai-vibe-rules/fileset-cli/Socket

fileset-cli

Warn

Audited by Socket on Apr 10, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: The FileSets functionality is plausible for Domo, but the skill's actual footprint centers on an unverified third-party CLI rather than Domo's documented official Ryuu CLI. Because this external CLI likely receives profile credentials and performs bidirectional file transfer, the skill presents high supply-chain and credential-forwarding risk despite a legitimate-looking purpose.

Confidence: 85%Severity: 84%

Audit Metadata

Analyzed At

Apr 10, 2026, 04:56 PM

Package URL

pkg:socket/skills-sh/stahura%2Fdomo-ai-vibe-rules%2Ffileset-cli%2F@1e7886fa2954c1790bcec11744e4d5df7344f640