deploy-scaffold-gen

Fail

Audited by Socket on Mar 11, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill is a deployment manifest scaffolding tool for CLEF applications. Its footprint—input-driven manifest generation, use of standard developer tooling for validation, and emission of deploy.yaml via an emitter—appears coherent with its stated purpose. There are no evident credential reads, external data exfiltration, or supply-chain download-execute patterns within the described scope. The primary usage involves local generation and validation steps, with integration points to official tooling (npm/pnpm, Terraform/CloudFormation/Pulumi) for IaC. Overall risk is low to moderate, dominated by typical development workflow considerations (trust in npm registry for npx, proper IaC provider handling).

Confidence: 98%
Audit Metadata
Analyzed At
Mar 11, 2026, 04:47 PM
Package URL
pkg:socket/skills-sh/Itshalffull%2FConcept-Oriented-Programming-Framework%2Fdeploy-scaffold-gen%2F@efe9503e4007bb7675c99a4accf64f49cf91886f