azure-devops

Warn

Audited by Socket on Apr 27, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is internally consistent about being a proxy-only Apideck connector, and there is no malicious installer behavior. However, it routes Azure DevOps requests and credential handling through Apideck rather than official Microsoft endpoints, creating a third-party interception/trust model that is riskier than direct integration and only partly proportionate to the stated purpose.

Confidence: 89%Severity: 63%
Audit Metadata
Analyzed At
Apr 27, 2026, 11:27 AM
Package URL
pkg:socket/skills-sh/apideck-libraries%2Fapi-skills%2Fazure-devops%2F@ddb2a231052f37a676ed2a6a39c28d57c089f1c5