cli-anything

Warn

Audited by Socket on Jul 27, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core purpose is mostly consistent with the capabilities, and the main PyPI install path appears same-project and verifiable. However, the skill goes beyond simple guidance by encouraging autonomous software and skill installation through third-party installer tooling, creating transitive trust and medium-high operational risk without clear credential theft evidence.

Confidence: 84%Severity: 69%
Audit Metadata
Analyzed At
Jul 27, 2026, 11:40 AM
Package URL
pkg:socket/skills-sh/akillness%2Fjeo-skills%2Fcli-anything%2F@2b31221533b2fcc0bf490511e03187ae3fb5576a846b1ddf7381d69145825814
Security Audit — socket — cli-anything