steedos-dev-testing

Warn

Audited by Socket on May 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is broadly aligned with Steedos dev/testing and uses mostly official npm-based tooling, so it does not look malicious. However, it instructs transitive skill installation and unnecessarily stores plaintext login credentials in .github/copilot-instructions.md, creating moderate security risk disproportionate to a testing workflow.

Confidence: 87%Severity: 61%
Audit Metadata
Analyzed At
May 18, 2026, 06:56 AM
Package URL
pkg:socket/skills-sh/steedos%2Fsteedos-platform%2Fsteedos-dev-testing%2F@2d32327680aa7b96c96918f9063010be5a1cdf3d
Security Audit — socket — steedos-dev-testing