suparank/setup
Fail
Audited by Socket on Feb 28, 2026
1 alert found:
MalwareMalwareSKILL.md
HIGHMalwareHIGH
SKILL.md
Benign overall: the fragment describes a user-guided setup workflow that reads user input, writes a project config file, and optionally stores credentials in a dedicated home-directory file. This aligns with a legitimate setup assistant. Security considerations mainly involve credential handling and ensuring credentials are not written to the project directory or committed to version control, which the instructions already emphasize. No evidence of data exfiltration, autonomous actions, or hardcoded secrets is present in the fragment. Potential risk remains in how the implemented tool handles and protects credentials (access controls, secure storage, and proper permissions).
Confidence: 95%Severity: 90%
Audit Metadata