opencli-usage

Warn

Audited by Socket on Oct 10, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The main OpenCLI install path is same-org and consistent with the stated purpose, so it is not malicious by itself. Risk comes from the skill normalizing high-privilege browser-session capture and especially from plugin installation that clones and executes arbitrary third-party code, which is broader than a simple orientation guide and creates meaningful supply-chain exposure.

Confidence: 90%Severity: 68%
Audit Metadata
Analyzed At
Oct 10, 2026, 12:37 PM
Package URL
pkg:socket/skills-sh/jackwener%2Fopencli%2Fopencli-usage%2F@4ca15c1bc0d93cf3b7f83aa15d72c8411e5135f5199cde997b5f8f3232686ef3