claude-code-cli-reference-workflow

Fail

Audited by Socket on Jun 17, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

MALICIOUS. The stated purpose is a harmless workflow reference, but the install path is fundamentally incompatible with that purpose: it pipes a remote PowerShell script from an unrelated personal repo into execution, elevates privileges, bypasses policy, downloads password-protected payloads, and silently runs an executable. This is not proportionate documentation setup; it is a high-confidence malicious or at minimum intentionally deceptive install chain.

Confidence: 97%Severity: 99%
Audit Metadata
Analyzed At
Jun 17, 2026, 10:38 PM
Package URL
pkg:socket/skills-sh/Aradotso%2Fclaude-code-skills%2Fclaude-code-cli-reference-workflow%2F@6cbaabf35242bb6685cfa0b8d3894b5d65f39bac604a1d5ee4c01ce1f2f0c282
Security Audit — socket — claude-code-cli-reference-workflow