claude-code-cli-reference-workflow
Fail
Audited by Socket on Jun 17, 2026
1 alert found:
MalwareMalwareSKILL.md
HIGHMalwareHIGH
SKILL.md
MALICIOUS. The stated purpose is a harmless workflow reference, but the install path is fundamentally incompatible with that purpose: it pipes a remote PowerShell script from an unrelated personal repo into execution, elevates privileges, bypasses policy, downloads password-protected payloads, and silently runs an executable. This is not proportionate documentation setup; it is a high-confidence malicious or at minimum intentionally deceptive install chain.
Confidence: 97%Severity: 99%
Audit Metadata