wonda-cli

Warn

Audited by Socket on Sep 30, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill appears internally coherent and same-publisher-installed, so it is not confirmed malware, but its footprint is unusually expansive and high-impact. It combines credentialed browser automation, cookie/session handling, cloud relay/twin execution, scheduled social actions, and external-content ingestion, creating substantial security and misuse risk even though those capabilities align with the advertised product.

Confidence: 90%Severity: 84%
Audit Metadata
Analyzed At
Sep 30, 2026, 07:07 PM
Package URL
pkg:socket/skills-sh/degausai%2Fwonda%2Fwonda-cli%2F@fdd8a082c261fc982ed9a0fe26e5fa349c87cc0b6b59cee87ab7404ea786acb4
Security Audit — socket — wonda-cli