cli-anything
Warn
Audited by Socket on Jul 27, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core purpose is mostly consistent with the capabilities, and the main PyPI install path appears same-project and verifiable. However, the skill goes beyond simple guidance by encouraging autonomous software and skill installation through third-party installer tooling, creating transitive trust and medium-high operational risk without clear credential theft evidence.
Confidence: 84%Severity: 69%
Audit Metadata