agent-auth-cli

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is coherent with its stated purpose as an Agent Auth CLI guide, and the CLI provenance appears partially verifiable through official npm/GitHub docs. However, it centralizes sensitive auth material in an external CLI, uses unpinned npx execution, stores local key material, and explicitly supports autonomous execution of high-impact provider capabilities such as money transfer or admin access.

Confidence: 83%Severity: 68%
Audit Metadata
Analyzed At
Sep 18, 2026, 10:26 AM
Package URL
pkg:socket/skills-sh/better-auth%2Fagent-auth%2Fagent-auth-cli%2F@794e587ed0978071f103f4edd753795274805b4eba95733df6af485dbfc93438