deploy-scaffold-gen
Audited by Socket on Mar 11, 2026
1 alert found:
Obfuscated FileThe skill is a deployment manifest scaffolding tool for CLEF applications. Its footprint—input-driven manifest generation, use of standard developer tooling for validation, and emission of deploy.yaml via an emitter—appears coherent with its stated purpose. There are no evident credential reads, external data exfiltration, or supply-chain download-execute patterns within the described scope. The primary usage involves local generation and validation steps, with integration points to official tooling (npm/pnpm, Terraform/CloudFormation/Pulumi) for IaC. Overall risk is low to moderate, dominated by typical development workflow considerations (trust in npm registry for npx, proper IaC provider handling).