skills/ruvnet/ruflo/workflow-automation/Socket

workflow-automation

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill’s functionality matches its stated purpose, but it centers on executing an external, unpinned npm CLI that can act on production workflows. Data flow is not overtly exfiltrative, yet install trust and automation impact are broader than a low-risk documentation skill.

Confidence: 83%Severity: 62%

Audit Metadata

Analyzed At

Sep 15, 2026, 11:37 AM

Package URL

pkg:socket/skills-sh/ruvnet%2Fruflo%2Fworkflow-automation%2F@7c08b6c0912458dad692231fa209773480f37784d6cc52e96cfaca9271109817