pagerduty-automation

Warn

Audited by Socket on Jun 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The capability set is aligned with PagerDuty automation, but the skill routes all actions through a discontinued third-party MCP broker instead of PagerDuty's official first-party MCP. That creates medium data-flow and operational risk even without obvious malware or credential-stealing behavior.

Confidence: 84%Severity: 61%
Audit Metadata
Analyzed At
Jun 24, 2026, 02:51 AM
Package URL
pkg:socket/skills-sh/zhugez%2FOrbitSmith%2Fpagerduty-automation%2F@a25b3540e42c6b10b521dbb9ca8dd037f62a27b1950c475f40de1d41db8b052b
Security Audit — socket — pagerduty-automation