hetzner-dev
Warn
Audited by Socket on Aug 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's remote-development purpose aligns with its capabilities, but its real footprint is broad: it depends on an external hdev CLI/service, forwards multiple high-value credentials, and enables autonomous remote coding plus PR creation. Nothing here is clearly malicious, yet the trust and credential scope are substantial enough to rate it as medium risk rather than benign.
Confidence: 85%Severity: 66%
Audit Metadata