install-wizard

Warn

Audited by Socket on Oct 4, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL_detail.md

No clear malware or data-exfiltration behavior is present in the supplied fragment. It is an installer with substantial system-modifying behavior and two notable consent-integrity concerns: SessionStart hook registration is not gated despite the documentation stating it is, and the 4-axis Git hook block lacks a visible Y/N conditional. Installing phantom-gate directly from an unpinned Git repository and installing a remote Claude plugin create supply-chain risk and should be reviewed, pinned, and integrity-verified before use.

Confidence: 94%Severity: 62%
Audit Metadata
Analyzed At
Oct 4, 2026, 08:09 PM
Package URL
pkg:socket/skills-sh/chrono-meta%2Fforge-harness%2Finstall-wizard%2F@9ac025afe5bfcded59864e0eb80c297db3cc92ce3e5efbafd5da0ecf007a151c