session-bootstrap

Warn

Audited by Socket on Sep 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose matches the read-only status-check behavior, and the flagged command substitution is benign documentation context. However, the skill executes an unverifiable custom local script (`~/.claude/evolution/bin/evolve-status.sh`) tied to an unverified local framework not found in official Anthropic docs, so install/execution trust is weak even without overt exfiltration or credential handling.

Confidence: 90%Severity: 72%
Audit Metadata
Analyzed At
Sep 21, 2026, 05:07 PM
Package URL
pkg:socket/skills-sh/kmshihab7878%2Fclaude-code-setup%2Fsession-bootstrap%2F@94728bdc1df097eaf6456f58ef0a3e573fc1d4f234459e2bace1de6d719dc649