azure-devops
Warn
Audited by Socket on Apr 27, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill is internally consistent about being a proxy-only Apideck connector, and there is no malicious installer behavior. However, it routes Azure DevOps requests and credential handling through Apideck rather than official Microsoft endpoints, creating a third-party interception/trust model that is riskier than direct integration and only partly proportionate to the stated purpose.
Confidence: 89%Severity: 63%
Audit Metadata