skills/ewingyangs/clipno-cli/clipno/Socket

clipno

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s purpose is coherent, but trust is weakened by unpinned `npx @latest` execution, unclear first-party verification of the CLI install path, and credential/content routing through Clipno rather than direct official APIs. This looks more like a medium-risk third-party SaaS wrapper than clear malware.

Confidence: 82%Severity: 61%

Audit Metadata

Analyzed At

Jul 23, 2026, 07:27 AM

Package URL

pkg:socket/skills-sh/EwingYangs%2Fclipno-cli%2Fclipno%2F@bc3c99b08a42a1afd88665aa64d8eeb7a362863b253fab331bc39d576a0e2623