cc-plugins
Warn
Audited by Socket on Apr 8, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core detection behavior is coherent and low-risk, but the skill exceeds that purpose by promoting remote curl|bash installers. The ECC install source appears invalid, and the CC Commander installer is an unpinned raw GitHub script from a personal repo, making the install guidance materially riskier than the stated plugin-status function.
Confidence: 89%Severity: 68%
Audit Metadata