cawcut-generate

Warn

Audited by Socket on Jul 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

Mostly coherent media-generation skill using a dedicated CawCut CLI, but it asks the agent to trust and operate that CLI extensively: install/upgrade it, authenticate through it, upload user media through it, and auto-download results. No clear exfiltration or deceptive data flow is visible from the skill text alone, yet the external-CLI dependency and autonomous Bash actions make it medium-risk and better classified as suspicious than fully benign.

Confidence: 82%Severity: 58%
Audit Metadata
Analyzed At
Jul 15, 2026, 03:30 AM
Package URL
pkg:socket/skills-sh/cawcut%2Fskill%2Fcawcut-generate%2F@29acd0bc3905400b7d7b3b56201fd5f455ea704c21887d747984bae12284b23d
Security Audit — socket — cawcut-generate