skills/linkupplatform/openclaw/eightctl/Socket

eightctl

Warn

Audited by Socket on Aug 1, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's purpose and capabilities mostly align, but it relies on an unofficial third-party CLI from a personal GitHub account, installed unpinned at `@latest`, and forwards account credentials to that tool. This is not confirmed malware, but it carries meaningful supply-chain and credential-trust risk plus real-world device-control risk.

Confidence: 84%Severity: 58%

Audit Metadata

Analyzed At

Aug 1, 2026, 08:32 AM

Package URL

pkg:socket/skills-sh/LinkupPlatform%2Fopenclaw%2Feightctl%2F@c6cdc62cc279750313ea2f7ab405629599e8485b4aa691e7eccb491738ab6ad0