skills/membranedev/application-skills/azure-devops/Socket

azure-devops

Warn

Audited by Socket on Apr 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill's purpose aligns with Azure DevOps management, and the CLI install source appears legitimate, but the data flow is routed through Membrane rather than directly to Azure DevOps. That third-party credential brokerage and proxy pattern is proportionately risky for the stated purpose and raises medium security concerns even without clear malicious intent.

Confidence: 87%Severity: 61%

Audit Metadata

Analyzed At

Apr 25, 2026, 11:50 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fazure-devops%2F@466c49ca434c28427946f52da69917a2dc463df3