skills/thisrohangupta/harness-skills/create-policy/Socket

create-policy

Warn

Audited by Socket on Mar 27, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill’s capabilities are well aligned with creating Harness governance policies and its data flow appears to stay within Harness, so there is no strong sign of malware or exfiltration. Risk comes from the dependency on Harness MCP v2: official docs exist, but the referenced V2 source provenance appears tied to a personal GitHub account while also receiving Harness API credentials, creating medium supply-chain and credential-forwarding concern.

Confidence: 83%Severity: 64%

Audit Metadata

Analyzed At

Mar 27, 2026, 10:40 PM

Package URL

pkg:socket/skills-sh/thisrohangupta%2Fharness-skills%2Fcreate-policy%2F@7f3188a0ccaeabff28667ae5d58b15ec68ae9d7e