understand-setup

Warn

Audited by Socket on Sep 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose fits local setup analysis, but the skill relies on a local, unverifiable Python module and local dashboard code path with broad access to `~/.claude`. No direct malicious exfiltration is shown, yet the install/execution trust is weak enough to classify this as high security risk rather than benign.

Confidence: 84%Severity: 78%
Audit Metadata
Analyzed At
Sep 21, 2026, 05:07 PM
Package URL
pkg:socket/skills-sh/kmshihab7878%2Fclaude-code-setup%2Funderstand-setup%2F@8dd7257f7574f5c6ad664b3cc38b24a5a9bd2427a988eac38a566fa3eace098f