GraphQL Schema Stitching & Federation Agent

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s stated purpose is plausible, but its provenance is inconsistent and its main installation path is transitive skill installation through third-party registries/CLIs. No direct credential theft or exfiltration is shown, but trust and publisher alignment are weak enough to treat it as medium risk.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Mar 29, 2026, 02:39 AM
Package URL
pkg:socket/skills-sh/agentskillexchange%2Fskills%2Fgraphql-schema-stitching-federation-agent%2F@c71fcfb7026c6724df09524cc822aa6b70601bfe
Security Audit — socket — GraphQL Schema Stitching & Federation Agent