claw-deck

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core capabilities fit a Felo LiveDoc workspace skill and data flows appear to target official Felo services, so this is not fundamentally incompatible with its purpose. However, it asks users to paste API keys into the agent, stores credentials in agent-accessible config, and directs silent/proactive remote synchronization and task updates; combined with moderately risky install trust, that makes it a medium-risk skill rather than benign.

Confidence: 88%Severity: 56%
Audit Metadata
Analyzed At
Sep 18, 2026, 07:48 PM
Package URL
pkg:socket/skills-sh/felo-inc%2Ffelo-skills%2Fclaw-deck%2F@09f15300dc2dd2746c49d9abc5515a538ac08b2d924153125a0789f7eb6ae09e