odoo

Warn

Audited by Socket on Mar 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is purpose-aligned for Odoo administration and does not show obvious credential exfiltration or proxying, but it relies on non-official third-party packages to handle sensitive ERP credentials and exposes destructive business actions. Overall this is a coherent but medium-risk integration skill, not confirmed malware.

Confidence: 84%Severity: 53%
Audit Metadata
Analyzed At
Mar 14, 2026, 10:08 PM
Package URL
pkg:socket/skills-sh/marcfargas%2Fodoo-toolbox%2Fodoo%2F@a5e0841166182825470433b9ef3d9943dc021941