wendy-cloud-iterate

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s core purpose matches local CI/test automation for Wendy Cloud, and most endpoints are consistent with that purpose. However, it combines broad autonomous repo actions with a mutable curl|bash bootstrap and external CLI installs, creating high operational risk even without clear credential theft or exfiltration.

Confidence: 89%Severity: 76%
Audit Metadata
Analyzed At
Oct 8, 2026, 06:19 PM
Package URL
pkg:socket/skills-sh/wendylabsinc%2Fclaude-skills%2Fwendy-cloud-iterate%2F@261b897478b33bf9e9d1c79ba021453358d7071c12ce0b5bbce1a53e9a9c0764