skills/lua2147/claude-toolkit-catalog/automation-mcp/Socket

automation-mcp

Warn

Audited by Socket on Jul 15, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill's capabilities match its stated macOS automation purpose, but it is inherently high-impact because it grants broad desktop control and screen access. Supply-chain trust is moderate rather than extreme, with official Bun installation but a personal GitHub source repo and optional transitive installation path.

Confidence: 83%Severity: 72%

Audit Metadata

Analyzed At

Jul 15, 2026, 12:54 PM

Package URL

pkg:socket/skills-sh/Lua2147%2Fclaude-toolkit-catalog%2Fautomation-mcp%2F@10d4647e4108371076c4f8fb4d081a51fedfbfc5135fa9b60c0ecf8e6ac37d7b