cloud-sandbox

Warn

Audited by Socket on Jun 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's purpose is coherent with its capabilities, but it relies on a curl-to-shell installer, forwards an API key to an external CLI, and grants broad remote execution in paid cloud infrastructure. This looks more like a legitimate but medium-risk infrastructure skill than clear malware.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 13, 2026, 05:31 AM
Package URL
pkg:socket/skills-sh/ariana-dot-dev%2Fcloud-sandbox-vm-skills%2Fcloud-sandbox%2F@3a362361c09bde70b13a03ecd2fcbbf9f6e65a935d164370dfe04fc945188c07