truefoundry-integrate-gateway
Warn
Audited by Socket on Sep 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The overall purpose is coherent for a gateway-migration skill, and network calls mostly go to official TrueFoundry endpoints. However, the skill reads raw local credential files, scans repo secrets, and relies on unverified local helper/repo scripts with broad filesystem access; that footprint is high-trust and somewhat disproportionate, though not clearly malicious or exfiltrative.
Confidence: 88%Severity: 68%
Audit Metadata