sikaru
Warn
Audited by Socket on Nov 4, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The skill’s capabilities and stated Sikaru purpose are broadly aligned, but its remote pipe-to-shell installer is unverified and the resulting CLI handles authentication. Treat as high security risk due to install and credential-forwarding uncertainty; the supplied evidence does not confirm malware.
Confidence: 86%Severity: 85%
Audit Metadata