awiki-runtime

Warn

Audited by Socket on Apr 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill’s stated runtime-management purpose is plausible, but its trust model depends on an unverifiable awiki-cli binary with wildcard execution rights and partially undisclosed network behavior. I see no confirmed malicious payload or credential harvesting in this skill text, but the binary provenance gap alone makes the overall risk high.

Confidence: 86%Severity: 82%
Audit Metadata
Analyzed At
Apr 12, 2026, 12:50 PM
Package URL
pkg:socket/skills-sh/agentconnect%2Fawiki-cli%2Fawiki-runtime%2F@eaa593dee0b4b16238391f1cc7a2d83a88f2e92a