add-machine

Warn

Audited by Socket on Aug 26, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is mostly aligned with its stated purpose of onboarding machines for security audits, and its data flows are direct over standard SSH rather than a credential-harvesting proxy. However, it grants an AI agent meaningful remote infrastructure access and optional remote file deployment, making it a high-impact operational skill that should be treated as medium-high security risk rather than benign.

Confidence: 87%Severity: 66%
Audit Metadata
Analyzed At
Aug 26, 2026, 05:16 PM
Package URL
pkg:socket/skills-sh/danielrosehill%2Fclaude-security-auditor-plugin%2Fadd-machine%2F@ccb8ad52eb8b0bca3134237fc7b9d4ff0038175e195a0b26832ecf3a95552401
Security Audit — socket — add-machine