cloudflare-traffic-investigator

Warn

Audited by Socket on Mar 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The investigative purpose is coherent, but the skill relies on a non-verified cloudflare-mcp-cli instead of Cloudflare's documented official MCP server/endpoints. Because the skill installs and then likely passes Cloudflare credentials/data through this opaque CLI, the trust and data-flow model is not proportionate or verifiable.

Confidence: 87%Severity: 84%
Audit Metadata
Analyzed At
Mar 14, 2026, 02:51 PM
Package URL
pkg:socket/skills-sh/delexw%2Fclaude-code-misc%2Fcloudflare-traffic-investigator%2F@040f6c44838d548eb93ff091d67a902e7f9db012