sikaru

Warn

Audited by Socket on Nov 4, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill’s capabilities and stated Sikaru purpose are broadly aligned, but its remote pipe-to-shell installer is unverified and the resulting CLI handles authentication. Treat as high security risk due to install and credential-forwarding uncertainty; the supplied evidence does not confirm malware.

Confidence: 86%Severity: 85%
Audit Metadata
Analyzed At
Nov 4, 2026, 10:08 AM
Package URL
pkg:socket/skills-sh/aadi-labs%2Fsikaru-plugins%2Fsikaru%2F@5d94c2ecece07335aeedbc199e20061711417722fcac7e0fc79fae450f54982a