ss-cli-deploy
Warn
Audited by Socket on Mar 19, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The skill's purpose is coherent, but its trust model is not. The main concern is the undocumented custom ss-cli wrapper, published by a non-Delinea author, handling Secret Server credentials and injecting them into subprocesses. No direct exfiltration is shown, but credential forwarding through an unverifiable tool makes this a high security-risk deployment skill.
Confidence: 89%Severity: 82%
Audit Metadata