ccc-security

Warn

Audited by Socket on Jun 18, 2026

2 alerts found:

AnomalySecurity
AnomalyLOW
SKILL.md

SUSPICIOUS. The top-level skill is mostly a router and is broadly aligned with a security-audit purpose, but it asks the agent to operate across a full security domain and to load unseen sub-skills. With no concrete install steps, credential handling, or data flows shown here, there is no evidence of confirmed malware; the main risk is transitive trust and the high-impact nature of downstream security capabilities.

Confidence: 82%Severity: 58%
SecurityMEDIUM
security-audit/SKILL.md
Audit Metadata
Analyzed At
Jun 18, 2026, 02:35 PM
Package URL
pkg:socket/skills-sh/KevinZai%2Fcommander%2Fccc-security%2F@8a4bdd0790cdc15eb5a8bed519a0ff5d5d265c00d0585a2f4d40125314b69fb2
Security Audit — socket — ccc-security