remote-run

Warn

Audited by Socket on Sep 12, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: mostly coherent BuildBuddy remote-execution workflow with official same-org install/docs, but the skill expands scope by enabling arbitrary remote shell commands, uploads local git diffs off-host, and relies on a pipe-to-shell installer plus credential forwarding to an external CLI/service. This looks like a legitimate but medium-risk remote execution skill, not confirmed malware.

Confidence: 91%Severity: 56%
Audit Metadata
Analyzed At
Sep 12, 2026, 07:16 PM
Package URL
pkg:socket/skills-sh/buildbuddy-io%2Fbuildbuddy%2Fremote-run%2F@379fbf364bdc7e249c17c1be0500e846441c13d27a8e74958d07e2fdea212d1b
Security Audit — socket — remote-run