skills/dl-alexandre/skills/cimis-cli/Socket

cimis-cli

Warn

Audited by Socket on Sep 20, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s purpose and commands are internally coherent for CIMIS weather access, and it asks only for a relevant API key. However, it relies on an unverifiable local `cimis` CLI with no documented install source or registry provenance, so credential forwarding and supply-chain trust are disproportionate to the otherwise simple task.

Confidence: 84%Severity: 74%

Audit Metadata

Analyzed At

Sep 20, 2026, 03:08 AM

Package URL

pkg:socket/skills-sh/dl-alexandre%2Fskills%2Fcimis-cli%2F@5c5384720801c6cda5852e6385cfddc1d3221b673fcbd2fbb7baf06bdba57312