skills/dl-alexandre/skills/abc-cli/Socket

abc-cli

Warn

Audited by Socket on Sep 20, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The stated purpose is plausible and the commands match Apple Business Connect concepts, but the core `abc` CLI is undocumented and unverifiable. The skill asks the agent to pass Apple OAuth credentials and business content into an unknown binary that can perform real-world listing changes, making the footprint disproportionate to the trust evidence provided.

Confidence: 89%Severity: 86%

Audit Metadata

Analyzed At

Sep 20, 2026, 03:08 AM

Package URL

pkg:socket/skills-sh/dl-alexandre%2Fskills%2Fabc-cli%2F@cc3d0e5b5115b0ea023ba6c05345de95f5bb88e6aa5cdc5f187f9969295a3c13