duplicator

Warn

Audited by Socket on Aug 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The stated purpose is plausible, but the operational footprint is underspecified. The skill asks for multi-platform publishing credentials and performs external posting based on scanned content, while hiding critical install and endpoint details in an unavailable README. This is not confirmed malware, but it is a medium-risk skill with unclear trust and data-flow boundaries.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Aug 21, 2026, 01:49 PM
Package URL
pkg:socket/skills-sh/axelfreeman%2Fduplicator%2Fduplicator%2F@9b8f36d703cc6abf167a7485e42149ea69cf2a45
Security Audit — socket — duplicator