skills/briqt/pty-bridge-cli/pty-bridge/Socket

pty-bridge

Warn

Audited by Socket on May 3, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the capability matches the stated PTY/interactive-terminal purpose, but the install path is an unpinned GitHub-source global CLI from a personal account with weak release provenance. The main risk is supply-chain trust compounded by credential forwarding and expanded remote-shell control, not clear malicious behavior or hidden exfiltration.

Confidence: 87%Severity: 78%

Audit Metadata

Analyzed At

May 3, 2026, 09:04 AM

Package URL

pkg:socket/skills-sh/briqt%2Fpty-bridge-cli%2Fpty-bridge%2F@dd5409ff79ce118171217f7962f81994c911b879