skills/langgenius/dify/difyctl/Socket

difyctl

Warn

Audited by Socket on Oct 3, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core difyctl usage is aligned with an official Dify CLI and direct Dify-server data flow, but the skill includes transitive skill installation guidance and documents --insecure TLS bypass. The base functionality looks legitimate; the main risk is trust expansion beyond the base skill rather than clear malicious behavior.

Confidence: 90%Severity: 52%

Audit Metadata

Analyzed At

Oct 3, 2026, 08:44 PM

Package URL

pkg:socket/skills-sh/langgenius%2Fdify%2Fdifyctl%2F@be34b9efe924c316fb425e73a888e9b058b0a83d62a72134e26cdf4cf3631607