wendy-cloud-iterate
Warn
Audited by Socket on Oct 8, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill’s core purpose matches local CI/test automation for Wendy Cloud, and most endpoints are consistent with that purpose. However, it combines broad autonomous repo actions with a mutable curl|bash bootstrap and external CLI installs, creating high operational risk even without clear credential theft or exfiltration.
Confidence: 89%Severity: 76%
Audit Metadata