skills/imhansiy/my-skills/colab-cli/Socket

colab-cli

Warn

Audited by Socket on Aug 21, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s core purpose is coherent, and official Linux/macOS usage is benign, but the declared target setup depends on a personal GitHub Windows fork that is not the official publisher path. Because that forked CLI receives OAuth credentials and mediates Colab API/file operations, the skill has high supply-chain risk despite otherwise legitimate Colab functionality.

Confidence: 92%Severity: 84%

Audit Metadata

Analyzed At

Aug 21, 2026, 08:54 PM

Package URL

pkg:socket/skills-sh/imhansiy%2Fmy-skills%2Fcolab-cli%2F@33ad0969de847adf60a5f788a84a7cfae7df0e0a35b5a982f6945c87339daf0c