server-md

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose is coherent for a server inventory/runbook skill, and the documentation emphasizes masking and confirmation. However, the skill's core dependency is an unverifiable local CLI that can read sensitive infrastructure data, reveal secrets, execute remote commands, and sync metadata across hosts; that makes the overall security risk high even without clear evidence of malware.

Confidence: 87%Severity: 82%
Audit Metadata
Analyzed At
Jul 16, 2026, 01:27 PM
Package URL
pkg:socket/skills-sh/DoiiarX%2Fclaude-skills%2Fserver-md%2F@b3a79ab5c1b5d23205d02dc941a0fc1b3e41c50bd4637ac44d08d030643f515a