rch

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is broadly coherent with a remote compilation helper and its SSH-based worker management is proportionate to that purpose, but it enables remote execution/file transfer across a fleet and omits any verifiable install/provenance details for the core `rch` tooling. Main concern is execution trust and expanded access scope, not confirmed malware or credential theft.

Confidence: 81%Severity: 58%
Audit Metadata
Analyzed At
Apr 28, 2026, 08:11 PM
Package URL
pkg:socket/skills-sh/dicklesworthstone%2Fremote_compilation_helper%2Frch%2F@faf7471318553a06219006db7869ebd75fb50b0b
Security Audit — socket — rch