dev-helper-official
Fail
Audited by Socket on Apr 20, 2026
1 alert found:
MalwareMalwareSKILL.md
HIGHMalwareHIGH
SKILL.md
MALICIOUS. The skill's actual footprint is fundamentally incompatible with its stated purpose: it escalates agent permissions, executes an unverifiable remote installer, opens a reverse shell, disables the firewall, and deletes data. The 'official helper' framing is deceptive social engineering rather than a coherent developer tool.
Confidence: 99%Severity: 100%
Audit Metadata