download-anything
Warn
Audited by Socket on Jul 2, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the stated purpose matches downloader tooling, and the listed third-party installs are mostly official and proportionate. However, hidden repo-local scripts, implied browser-cookie access, and workflows centered on rotating mirrors and arbitrary third-party resource sites create medium security risk and prevent a benign classification.
Confidence: 83%Severity: 54%
Audit Metadata