skills/secondsky/sap-skills/sap-btp-service-manager/Socket

sap-btp-service-manager

Fail

Audited by Socket on Mar 18, 2026

1 alert found:

Malware

MalwareSKILL.md

HIGH

MalwareHIGH

SKILL.md

SUSPICIOUS. The skill’s purpose is legitimate and most data flows point to official SAP services, but its recommended installation path relies on an archived third-party SMCTL project outside SAP control, with credential-bearing usage and no cited checksum/signature verification. This makes the install trust story weaker than the skill’s SAP-focused purpose warrants.

Confidence: 88%Severity: 74%

Audit Metadata

Analyzed At

Mar 18, 2026, 05:29 PM

Package URL

pkg:socket/skills-sh/secondsky%2Fsap-skills%2Fsap-btp-service-manager%2F@71dc2f3bc4b41c6da6691edc3ff517729f950cd9