truefoundry-integrate-gateway

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The overall purpose is coherent for a gateway-migration skill, and network calls mostly go to official TrueFoundry endpoints. However, the skill reads raw local credential files, scans repo secrets, and relies on unverified local helper/repo scripts with broad filesystem access; that footprint is high-trust and somewhat disproportionate, though not clearly malicious or exfiltrative.

Confidence: 88%Severity: 68%
Audit Metadata
Analyzed At
Sep 22, 2026, 07:11 AM
Package URL
pkg:socket/skills-sh/truefoundry%2Fskills%2Ftruefoundry-integrate-gateway%2F@2f13f342d381c8ec7748eff415bc355523d3df7d2a66024307855b3a05b58742