cloakify

Fail

Audited by Socket on Apr 16, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

This skill is malicious in context: its declared purpose is covert data exfiltration and DLP evasion, with explicit attacker-side decode and DNS/C2-style workflows. Although the GitHub source install is not especially deceptive, the capability itself is fundamentally incompatible with benign agent use and presents high exfiltration risk.

Confidence: 97%Severity: 98%
Audit Metadata
Analyzed At
Apr 16, 2026, 08:21 PM
Package URL
pkg:socket/skills-sh/AeonDave%2Fmalskill%2Fcloakify%2F@04f13493529374f0d15d04c15dacdd55e753c61e
Security Audit — socket — cloakify