skills/fairladyz625/harness-anything/harness-install/Socket

harness-install

Warn

Audited by Socket on Sep 7, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s actions mostly match its stated purpose, but its install path has notable trust risk because it fetches mutable source from a personal GitHub repository, runs `npm install`, and executes the resulting local CLI without strong release verification. I found no confirmed credential harvesting, exfiltration, or hidden pre-execution behavior.

Confidence: 87%Severity: 68%

Audit Metadata

Analyzed At

Sep 7, 2026, 02:34 PM

Package URL

pkg:socket/skills-sh/fairladyz625%2Fharness-anything%2Fharness-install%2F@41847bef6ea6e405a23f4bc19debd1263a6a3a73b5f39850c1406accf219a3cc