5dive-cli-extras

Warn

Audited by Socket on Aug 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is broadly aligned with its stated purpose as an advanced 5dive orchestration guide, not a disguised credential harvester. However, its footprint is inherently high-risk: root operations, external code/import surfaces, transitive skill installation, remote box control, and autonomous messaging/push/scheduling make it dangerous to grant to an agent without tight operator oversight.

Confidence: 87%Severity: 74%
Audit Metadata
Analyzed At
Aug 9, 2026, 03:13 AM
Package URL
pkg:socket/skills-sh/5dive-ai%2Fskills%2F5dive-cli-extras%2F@b91a512dc55e369420b016414b182ccd466b24f5a42bc45d590351a625f29359
Security Audit — socket — 5dive-cli-extras