ironbee-node-devtools-cli

Warn

Audited by Socket on May 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is largely coherent with its stated Node.js debugging purpose, and its install path appears proportionate to that purpose, but it requires a global third-party CLI, includes transitive skill installation, and grants powerful process-inspection and code-execution capabilities. No clear malicious exfiltration or off-platform credential routing is shown, yet the overall footprint is high-trust and should be treated as medium risk.

Confidence: 81%Severity: 56%
Audit Metadata
Analyzed At
May 29, 2026, 01:40 AM
Package URL
pkg:socket/skills-sh/ironbee-ai%2Fironbee-devtools-skills%2Fironbee-node-devtools-cli%2F@3aaa85ac6572991f21517702ca6d062097fa2c9a
Security Audit — socket — ironbee-node-devtools-cli