development

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Security
SecurityMEDIUM
autopilot/SKILL.md

SUSPICIOUS. The skill’s ABAP lifecycle capabilities broadly match its stated purpose, but its footprint is high-risk because it enables autonomous activation and transport of SAP code and delegates to multiple unspecified skills/agents. There is no clear credential theft or exfiltration path in the provided text, so this is not malware, but it is a high-impact enterprise automation skill that should require tight permissioning and provenance checks for the MCP server and chained skills.

Confidence: 90%Severity: 74%
Audit Metadata
Analyzed At
Jul 16, 2026, 01:30 PM
Package URL
pkg:socket/skills-sh/vigneshbarani24%2Fsap-superpowers%2Fdevelopment%2F@82658b62b9a02cf6f4cb35c6aa756726263e609506b7ff024b673effaad5adb7
Security Audit — socket — development