azdevops

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s purpose is coherent, but it centers on an unofficial third-party CLI that receives and stores a high-value Azure DevOps PAT, creating meaningful supply-chain and credential-forwarding risk. The capabilities match Azure DevOps management, so this is not clearly malicious, but trust should depend on verifying the CLI publisher and source.

Confidence: 82%Severity: 64%
Audit Metadata
Analyzed At
Apr 30, 2026, 10:34 PM
Package URL
pkg:socket/skills-sh/billpeet%2Fagent-skills%2Fazdevops%2F@b938abd071252ad0ff00248b54a706589b25ed10