skills/lichamnesia/skill-lint/base64-short/Socket

base64-short

Fail

Audited by Socket on Apr 20, 2026

1 alert found:

Malware

MalwareSKILL.md

HIGH

MalwareHIGH

SKILL.md

MALICIOUS. The skill’s only function is to hide and execute a remote shell script from an unverifiable domain, which is fundamentally incompatible with any benign skill purpose. The hidden curl|sh chain creates an immediate arbitrary code execution and supply-chain compromise risk.

Confidence: 99%Severity: 99%

Audit Metadata

Analyzed At

Apr 20, 2026, 06:17 AM

Package URL

pkg:socket/skills-sh/LichAmnesia%2Fskill-lint%2Fbase64-short%2F@a0e244a55ec2dafb264390efac573dc847e01d58