cloud-sandbox
Warn
Audited by Socket on Jun 13, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's purpose is coherent with its capabilities, but it relies on a curl-to-shell installer, forwards an API key to an external CLI, and grants broad remote execution in paid cloud infrastructure. This looks more like a legitimate but medium-risk infrastructure skill than clear malware.
Confidence: 100%Severity: 60%
Audit Metadata