appbuilder-connector-setup

Warn

Audited by Socket on Mar 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill content is coherently aligned with a multi-path setup workflow for Adobe App Builder connectors. It requests authentication, reads a workspace JSON to tailor configuration, maps connector types to templates, scaffolds the project, and guides post-setup commands. No explicit malware indicators are present (no hardcoded secrets, no covert data exfiltration, no remote code execution embedded). However, there are risky patterns common to supply-chain and automation flows: use of environment variable CI to bypass interactive auth in specific environments, dependency on external onboarding via npx, and multiple shell commands that could install or run code with elevated privileges. These patterns merit caution but are not in themselves malicious. The overall security risk is moderate (vulnerable) due to potential misconfigurations or credential exposure in logs/log history, rather than explicit malicious intent.

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Mar 1, 2026, 07:28 AM
Package URL
pkg:socket/skills-sh/v-adiga%2Fappbuilder-connector-skills%2Fappbuilder-connector-setup%2F@d6ff7ac376762e3930989f841779abf364e82040