dreamina-cli
Warn
Audited by Socket on Oct 4, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core Dreamina CLI functionality is broadly aligned with the skill’s purpose and uses an apparently official vendor installer, so this is not malware-like. However, the skill includes a transitive install of another skill from a third-party repo and relies on unpinned curl|bash installation, which makes trust and supply-chain scope weaker than a strictly benign documentation/integration skill.
Confidence: 87%Severity: 58%
Audit Metadata