youtrack

Warn

Audited by Socket on Apr 27, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose matches YouTrack management, but its trust model is weak because it routes permanent YouTrack credentials through a non-official third-party CLI instead of JetBrains' official API path. This is not confirmed malware, but it is a meaningful supply-chain and credential-forwarding risk.

Confidence: 86%Severity: 68%
Audit Metadata
Analyzed At
Apr 27, 2026, 02:12 AM
Package URL
pkg:socket/skills-sh/billpeet%2Fagent-skills%2Fyoutrack%2F@ca211650b415349a5d329af9ad2b63899f0ee6c2