skills/derek-x-wang/skills/fuelcheck/Socket

fuelcheck

Warn

Audited by Socket on Apr 3, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the purpose is coherent, but the skill asks users to trust a third-party multi-provider CLI and promotes a `curl|sh` installer from a personal GitHub release. No clear malicious data exfiltration is shown, yet install trust and implicit access to multiple provider sessions make the skill medium risk.

Confidence: 80%Severity: 62%

Audit Metadata

Analyzed At

Apr 3, 2026, 07:46 AM

Package URL

pkg:socket/skills-sh/Derek-X-Wang%2Fskills%2Ffuelcheck%2F@951c26ac3a772bdc4e57345df019c4ebd299f060