app-store-screenshots

Warn

Audited by Socket on Apr 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s core purpose is coherent, and the `infsh` installer appears to be the publisher’s official path rather than an arbitrary third-party payload. Risk comes from mutable curl|sh installation, credential use through an external CLI, broad Bash permissioning, and transitive installation of additional skills that extend trust beyond the stated screenshot task.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Apr 23, 2026, 07:52 AM
Package URL
pkg:socket/skills-sh/inference-sh%2Fskills%2Fapp-store-screenshots%2F@fecd764027f4b9c926a16fd21de5e1fadd24e0d0