dreamina-cli

Warn

Audited by Socket on Oct 4, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core Dreamina CLI functionality is broadly aligned with the skill’s purpose and uses an apparently official vendor installer, so this is not malware-like. However, the skill includes a transitive install of another skill from a third-party repo and relies on unpinned curl|bash installation, which makes trust and supply-chain scope weaker than a strictly benign documentation/integration skill.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Oct 4, 2026, 01:35 PM
Package URL
pkg:socket/skills-sh/full-aigc-skills%2Fdreamina-skills%2Fdreamina-cli%2F@a60a327a7ee3c8876b07903e44397fa92d47068d5bf5aaf81ebd193dd76aa65f