install-wizard
Warn
Audited by Socket on Oct 4, 2026
1 alert found:
AnomalyAnomalySKILL_detail.md
LOWAnomalyLOW
SKILL_detail.md
No clear malware or data-exfiltration behavior is present in the supplied fragment. It is an installer with substantial system-modifying behavior and two notable consent-integrity concerns: SessionStart hook registration is not gated despite the documentation stating it is, and the 4-axis Git hook block lacks a visible Y/N conditional. Installing phantom-gate directly from an unpinned Git repository and installing a remote Claude plugin create supply-chain risk and should be reviewed, pinned, and integrity-verified before use.
Confidence: 94%Severity: 62%
Audit Metadata