devtools-hub-installer

Warn

Audited by Socket on May 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill’s core purpose is plausible, but its actual trust model is inconsistent. Running an admin-level EXE from a GitHub repo unrelated to the named publisher, plus contradictory claims about runtime downloads, makes the install path high risk even without clear evidence of credential theft or overt malware.

Confidence: 86%Severity: 82%
Audit Metadata
Analyzed At
May 17, 2026, 11:25 PM
Package URL
pkg:socket/skills-sh/Aradotso%2Fdevtools-skills%2Fdevtools-hub-installer%2F@0023594172abed941b312db37e310043d44a3f20