cli-anything-iterm2-ctl
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s capabilities are broadly consistent with controlling iTerm2, and the iTerm2/Homebrew prerequisite is legitimate. The main issue is install trust: the required `pip install cli-anything-iterm2` package is not verifiable from the provided evidence, so the skill depends on an unclear Python package distribution path. That makes this a high supply-chain risk skill, but not confirmed malware.
Confidence: 88%Severity: 72%
Audit Metadata