cc-switch-cli
Warn
Audited by Socket on May 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s capabilities mostly match its stated purpose, but it asks the agent to install and trust a third-party CLI from a different publisher identity, handle multiple credential types, and perform transitive community-skill installation. This looks more like a broad admin wrapper than obvious malware, but the install trust and credential-routing footprint are larger than ideal.
Confidence: 84%Severity: 66%
Audit Metadata