cli-anything-iterm2-ctl

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s capabilities are broadly consistent with controlling iTerm2, and the iTerm2/Homebrew prerequisite is legitimate. The main issue is install trust: the required `pip install cli-anything-iterm2` package is not verifiable from the provided evidence, so the skill depends on an unclear Python package distribution path. That makes this a high supply-chain risk skill, but not confirmed malware.

Confidence: 88%Severity: 72%
Audit Metadata
Analyzed At
Sep 15, 2026, 05:23 PM
Package URL
pkg:socket/skills-sh/hkuds%2Fcli-anything%2Fcli-anything-iterm2-ctl%2F@f74f987a4c883a188d839c163ec4f80e241ac45b256fb054f6719a8992009bde
Security Audit — socket — cli-anything-iterm2-ctl