suparank/setup

Fail

Audited by Socket on Feb 28, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

Benign overall: the fragment describes a user-guided setup workflow that reads user input, writes a project config file, and optionally stores credentials in a dedicated home-directory file. This aligns with a legitimate setup assistant. Security considerations mainly involve credential handling and ensuring credentials are not written to the project directory or committed to version control, which the instructions already emphasize. No evidence of data exfiltration, autonomous actions, or hardcoded secrets is present in the fragment. Potential risk remains in how the implemented tool handles and protects credentials (access controls, secure storage, and proper permissions).

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Feb 28, 2026, 09:38 PM
Package URL
pkg:socket/skills-sh/egebese%2Fsuparank%2Fsuparanksetup%2F@9b98aa7b716e491c5549bf881872614a18d02430
Security Audit — socket — suparank/setup