opencli-usage
Warn
Audited by Socket on Oct 10, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The main OpenCLI install path is same-org and consistent with the stated purpose, so it is not malicious by itself. Risk comes from the skill normalizing high-privilege browser-session capture and especially from plugin installation that clones and executes arbitrary third-party code, which is broader than a simple orientation guide and creates meaningful supply-chain exposure.
Confidence: 90%Severity: 68%
Audit Metadata