steedos-dev-testing
Warn
Audited by Socket on May 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill is broadly aligned with Steedos dev/testing and uses mostly official npm-based tooling, so it does not look malicious. However, it instructs transitive skill installation and unnecessarily stores plaintext login credentials in .github/copilot-instructions.md, creating moderate security risk disproportionate to a testing workflow.
Confidence: 87%Severity: 61%
Audit Metadata