linux-helper
Warn
Audited by Socket on Oct 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core Linux-helper behavior is coherent and mostly benign documentation, with no direct exfiltration or hidden execution. The main security concern is the out-of-scope recommendation to install an unverified third-party skill repo, which creates a transitive trust risk disproportionate to a command-writing helper.
Confidence: 88%Severity: 52%
Audit Metadata