clade-install-auth

Warn

Audited by Socket on Sep 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Suspicious. The skill's purpose is coherent, but the Node.js installation target appears to reference a likely non-official package for Anthropic SDK setup. That mismatch makes the install instructions internally inconsistent with the stated publisher/service and could route users to a typo-squatted dependency. Python instructions look proportionate, but overall risk is elevated by the questionable npm package, unpinned installs, and optional proxy routing example.

Confidence: 88%Severity: 74%
Audit Metadata
Analyzed At
Sep 9, 2026, 03:43 AM
Package URL
pkg:socket/skills-sh/jeremylongshore%2Ftons-of-skills-marketplace%2Fclade-install-auth%2F@6622694ab2d71624cd27282138717aa36dbc40b66e1666c09a544b86423c7d98