devtools-hub-installer
Warn
Audited by Socket on May 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The skill’s core purpose is plausible, but its actual trust model is inconsistent. Running an admin-level EXE from a GitHub repo unrelated to the named publisher, plus contradictory claims about runtime downloads, makes the install path high risk even without clear evidence of credential theft or overt malware.
Confidence: 86%Severity: 82%
Audit Metadata