cc-plugins

Warn

Audited by Socket on Apr 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core detection behavior is coherent and low-risk, but the skill exceeds that purpose by promoting remote curl|bash installers. The ECC install source appears invalid, and the CC Commander installer is an unpinned raw GitHub script from a personal repo, making the install guidance materially riskier than the stated plugin-status function.

Confidence: 89%Severity: 68%
Audit Metadata
Analyzed At
Apr 8, 2026, 02:33 PM
Package URL
pkg:socket/skills-sh/KevinZai%2Fcc-commander%2Fcc-plugins%2F@af855455467126d64cb9338571f41e593b414241
Security Audit — socket — cc-plugins