server-md

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose is coherent for a server inventory/runbook skill, and the documentation emphasizes masking and confirmation. However, the skill's core dependency is an unverifiable local CLI that can read sensitive infrastructure data, reveal secrets, execute remote commands, and sync metadata across hosts; that makes the overall security risk high even without clear evidence of malware.

Confidence: 87%Severity: 82%
Audit Metadata
Analyzed At
Jul 16, 2026, 01:27 PM
Package URL
pkg:socket/skills-sh/DoiiarX%2Fclaude-skills%2Fserver-md%2F@b3a79ab5c1b5d23205d02dc941a0fc1b3e41c50bd4637ac44d08d030643f515a
Security Audit — socket — server-md