download-anything

Warn

Audited by Socket on Jul 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose matches downloader tooling, and the listed third-party installs are mostly official and proportionate. However, hidden repo-local scripts, implied browser-cookie access, and workflows centered on rotating mirrors and arbitrary third-party resource sites create medium security risk and prevent a benign classification.

Confidence: 83%Severity: 54%
Audit Metadata
Analyzed At
Jul 2, 2026, 09:24 AM
Package URL
pkg:socket/skills-sh/hAcKlyc%2FMyAgents%2Fdownload-anything%2F@53762f758ef5586673fc689b1c3adc393bdab78b78b762180967d47638b80cf4
Security Audit — socket — download-anything