valet

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is broadly aligned with managing Valet agents, but its footprint is powerful. Main concerns are moderate supply-chain trust for installation, remote Git/source ingestion, and especially credential forwarding through `valet exec` into third-party commands and services. The behavior is coherent for a deployment/orchestration skill, but it warrants medium-high security caution rather than a benign rating.

Confidence: 81%Severity: 68%
Audit Metadata
Analyzed At
Apr 22, 2026, 05:52 PM
Package URL
pkg:socket/skills-sh/valetdotdev%2Fskills%2Fvalet%2F@700b2f23edc991ba2b5769ef69f10411d64a1402