skills/evolv3-ai/vibe-skills/cloudflare-cli/Socket

cloudflare-cli

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s capabilities fit its DNS-management purpose, but trust is reduced because it promotes an unofficial third-party CLI, mutable `curl|bash` installation from raw GitHub, unpinned latest-version installs, and credential forwarding to non-Cloudflare code. Data flows otherwise appear aligned with Cloudflare DNS administration rather than overt exfiltration.

Confidence: 88%Severity: 64%

Audit Metadata

Analyzed At

Sep 22, 2026, 07:05 PM

Package URL

pkg:socket/skills-sh/evolv3-ai%2Fvibe-skills%2Fcloudflare-cli%2F@5dbeed6203e3a896e17aeb70c87e5b664010fd9ff49ba0ec75555c198de47417