flowstudio-power-automate-debug

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is largely aligned with its debugging purpose and avoids classic malware/install patterns, but it routes credentials and sensitive Power Automate data through a third-party MCP gateway instead of official Microsoft APIs. Its ability to read detailed run payloads, update flows, and resubmit/trigger executions makes the trust boundary significant; this is best classified as medium-to-high security risk due to third-party credential/data brokering and production-impacting actions, not confirmed malware.

Confidence: 87%Severity: 64%
Audit Metadata
Analyzed At
Apr 30, 2026, 07:58 AM
Package URL
pkg:socket/skills-sh/github%2Fawesome-copilot%2Fflowstudio-power-automate-debug%2F@a379c51dbe011f15a22736029dd84e874e34614b