xaf-deployment

Fail

Audited by Socket on Mar 10, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill content presents a coherent, security-conscious deployment guide for DevExpress XAF applications, with production-oriented configurations, licensing, and health checks. It relies on official sources and standard secret-management practices (env vars and appsettings). While there are minor concerns around secret handling (license keys/connection strings in envs) and a dearth of explicit TLS/HSTS enforcement in the step-by-step sections, there is no evident credential harvesting, malicious data flow, or untrusted binary installation. Overall, the footprint is benign and proportionate to its stated purpose, with moderate securityRisk due to secret management considerations.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 10, 2026, 05:59 AM
Package URL
pkg:socket/skills-sh/kashiash%2Fxaf-skills%2Fxaf-deployment%2F@ab704acbeb8714831d1b4dc46cbae9c5bd4c9729