qmd

Pass

Audited by Socket on Jun 26, 2026

Checks
Malicious behaviorInjection, exfiltration, untrusted installs
Security concernsCredential exposure, tool/trust exploitation
Code obfuscationHidden or obfuscated code
Suspicious patternsReconnaissance, excessive autonomy, resource use
Audit Metadata
Analyzed At
Jun 26, 2026, 05:37 PM
Package URL
pkg:socket/skills-sh/CraftOS-dev%2FCraftBot%2Fqmd%2F@2b0ad341919bb015e0b5547a31293d0ed291807ca927407e6f7bde3dc9dd0b9e
Security Audit — socket — qmd