ss-cli-deploy

Warn

Audited by Socket on Mar 19, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill's purpose is coherent, but its trust model is not. The main concern is the undocumented custom ss-cli wrapper, published by a non-Delinea author, handling Secret Server credentials and injecting them into subprocesses. No direct exfiltration is shown, but credential forwarding through an unverifiable tool makes this a high security-risk deployment skill.

Confidence: 89%Severity: 82%
Audit Metadata
Analyzed At
Mar 19, 2026, 06:27 PM
Package URL
pkg:socket/skills-sh/sieteunoseis%2Fss-cli%2Fss-cli-deploy%2F@8741cb7814ed6facd758fadcb9600a5226ccdf59