clawdhub-hardened

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is internally consistent and likely same-ecosystem official, but its core function is transitive skill installation and publishing, which expands agent trust to downstream skills and allows endpoint redirection via registry override. Not overtly malicious, but medium risk due to supply-chain and trust-chain exposure.

Confidence: 89%Severity: 64%
Audit Metadata
Analyzed At
Apr 21, 2026, 06:35 PM
Package URL
pkg:socket/skills-sh/faberlens%2Fhardened-skills%2Fclawdhub-hardened%2F@9c1b0310b6dfaccfbe81028d401fdea71e523381
Security Audit — socket — clawdhub-hardened