skills/vimkim/my-cubrid-skills/cubrid-jira/Socket

cubrid-jira

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's JIRA read/update behavior matches its stated purpose, but it relies on a third-party CLI installed from an unpinned personal GitHub repository outside the official CUBRID org. The main concern is supply-chain and opaque credential handling inside that external tool, not clear malicious behavior in the skill text itself.

Confidence: 84%Severity: 58%

Audit Metadata

Analyzed At

Oct 8, 2026, 04:57 AM

Package URL

pkg:socket/skills-sh/vimkim%2Fmy-cubrid-skills%2Fcubrid-jira%2F@1ffd5da9d49c025c1cf33ce5e2c536c9ef5a517fd6e121e4727966d78c867598