oil

Pass

Audited by Socket on Oct 3, 2026

Checks
Malicious behaviorInjection, exfiltration, untrusted installs
Security concernsCredential exposure, tool/trust exploitation
Code obfuscationHidden or obfuscated code
Suspicious patternsReconnaissance, excessive autonomy, resource use
Audit Metadata
Analyzed At
Oct 3, 2026, 04:25 PM
Package URL
pkg:socket/skills-sh/carapace-sh%2Fcarapace%2Foil%2F@ec943291c7c57087f8f53bfb448a3e0ca2bd8531a5352ef542820a6bf0e49bb9