clade-install-auth
Warn
Audited by Socket on Sep 9, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
Suspicious. The skill's purpose is coherent, but the Node.js installation target appears to reference a likely non-official package for Anthropic SDK setup. That mismatch makes the install instructions internally inconsistent with the stated publisher/service and could route users to a typo-squatted dependency. Python instructions look proportionate, but overall risk is elevated by the questionable npm package, unpinned installs, and optional proxy routing example.
Confidence: 88%Severity: 74%
Audit Metadata