azure-devops

Warn

Audited by Socket on Sep 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is internally consistent with its stated purpose as an Apideck proxy connector, and there is no installer or obvious malware behavior. However, it deliberately places a third-party intermediary between the user and Azure DevOps, with credentials stored in Apideck Vault and all API calls routed through Apideck instead of Microsoft's official endpoints, creating a meaningful trust and data-flow risk.

Confidence: 91%Severity: 58%
Audit Metadata
Analyzed At
Sep 30, 2026, 06:34 PM
Package URL
pkg:socket/skills-sh/apideck-libraries%2Fapi-skills%2Fazure-devops%2F@8196ca56f1de824f5c789a9498f0417e55b95da0724cf63dbf8b9d1c76876e1c