ideogram-prod-checklist

Fail

Audited by Socket on Mar 12, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill content is broadly coherent with its stated purpose of guiding Ideogram production deployments and rollbacks. It leverages standard deployment tooling (kubectl, curl) and includes a structured, multi-step process with canary rollout and rollback. However, there are security-relevant considerations: implied access to Production API keys in a vault, potential for autonomous execution of deployment steps, and data flows to external status endpoints. While these are common in deployment automation, they require strict access controls, auditing, and explicit per-action user consent to avoid uncontrolled changes. Overall, the footprint is proportionate to its purpose but warrants tightened controls around autonomous actions and credentials management.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 12, 2026, 01:51 AM
Package URL
pkg:socket/skills-sh/jeremylongshore%2Fclaude-code-plugins-plus-skills%2Fideogram-prod-checklist%2F@a6e041c276daea4725d685da128946f5c4399fda