Warn
Audited by Socket on Oct 7, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s purpose is coherent, but its installation and command guidance are inconsistent with the likely upstream `wacli` project. It appears to direct the agent to install and use a potentially unrelated npm CLI for WhatsApp access, which is a high-risk supply-chain and credential/session-forwarding issue even without clear malicious intent.
Confidence: 92%Severity: 84%
Audit Metadata