agent-auth-cli
Warn
Audited by Socket on Sep 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill is coherent with its stated purpose as an Agent Auth CLI guide, and the CLI provenance appears partially verifiable through official npm/GitHub docs. However, it centralizes sensitive auth material in an external CLI, uses unpinned npx execution, stores local key material, and explicitly supports autonomous execution of high-impact provider capabilities such as money transfer or admin access.
Confidence: 83%Severity: 68%
Audit Metadata