skills/infsh-skills/skills/infsh-cli/Socket

infsh-cli

Warn

Audited by Socket on Jul 22, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core AI-app purpose matches the stated functionality, and the main CLI installer appears to be official same-org infrastructure, so this is not strong malware evidence. Risk comes from transitive skill installation, broad CLI execution scope, local file uploads, and especially autonomous Twitter/X actions with real-world consequences.

Confidence: 87%Severity: 62%

Audit Metadata

Analyzed At

Jul 22, 2026, 11:52 AM

Package URL

pkg:socket/skills-sh/infsh-skills%2Fskills%2Finfsh-cli%2F@b8ef3e4853ae898a2fec9e58e55f0bbe67994792