scarf

Pass

Audited by Socket on Oct 25, 2026

Checks
Malicious behaviorInjection, exfiltration, untrusted installs
Security concernsCredential exposure, tool/trust exploitation
Code obfuscationHidden or obfuscated code
Suspicious patternsReconnaissance, excessive autonomy, resource use
Audit Metadata
Analyzed At
Oct 25, 2026, 02:41 PM
Package URL
pkg:socket/skills-sh/l4ci%2Fskills%2Fscarf%2F@27696a14fbf633efd82b6291b213efa22a92a8fe3d8de0bb4defa40222bdef6c