clawdhub-hardened
Warn
Audited by Socket on Apr 21, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill is internally consistent and likely same-ecosystem official, but its core function is transitive skill installation and publishing, which expands agent trust to downstream skills and allows endpoint redirection via registry override. Not overtly malicious, but medium risk due to supply-chain and trust-chain exposure.
Confidence: 89%Severity: 64%
Audit Metadata