steamer

Warn

Audited by Socket on May 31, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The visible steamer file is mostly a documentation/instruction skill and does not itself contain code execution, exfiltration, or credential forwarding. However, its actual footprint extends toward high-sensitivity data collection from chats, email, local databases, and iMessage Full Disk Access, while deferring implementation to a companion engine/CLI not specified here. That creates scope and transitive-trust concerns disproportionate to a simple 'distillation' guide, even though the stated purpose and outputs are coherent. No confirmed malicious behavior is present in the provided file alone.

Confidence: 83%Severity: 52%
Audit Metadata
Analyzed At
May 31, 2026, 11:33 PM
Package URL
pkg:socket/skills-sh/agenmod%2Fsteamer-skill%2Fsteamer%2F@53d44ba40caa75d620d26099c5e5665d7b268cde
Security Audit — socket — steamer