sf-onboard

Pass

Audited by Socket on Jun 25, 2026

Checks

Malicious behaviorInjection, exfiltration, untrusted installs

Security concernsCredential exposure, tool/trust exploitation

Code obfuscationHidden or obfuscated code

Suspicious patternsReconnaissance, excessive autonomy, resource use

Audit Metadata

Analyzed At

Jun 25, 2026, 08:20 AM

Package URL

pkg:socket/skills-sh/huangrx6%2FSpecForge%2Fsf-onboard%2F@9802c12e0a3ad1508cf38eb253524e0c5718601b550d437b143fcce2449ef548