skills/bnadlerjr/dotfiles/datadog-cli/Socket

datadog-cli

Warn

Audited by Socket on Mar 28, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s purpose is coherent, but its trust model is not. It instructs the agent to execute a non-official-looking third-party Datadog CLI via npx and forward powerful Datadog credentials to it, creating a high supply-chain and credential-harvesting risk without proof of Datadog ownership or verified release provenance.

Confidence: 89%Severity: 83%

Audit Metadata

Analyzed At

Mar 28, 2026, 10:18 PM

Package URL

pkg:socket/skills-sh/bnadlerjr%2Fdotfiles%2Fdatadog-cli%2F@1febd0959b561e54f18f8872fba183812eb7dc89