skills/magentosh/skills/infsh-cli/Socket

infsh-cli

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core AI-app purpose matches the stated functionality, and the main CLI installer appears to be official same-org infrastructure, so this is not strong malware evidence. Risk comes from transitive skill installation, broad CLI execution scope, local file uploads, and especially autonomous Twitter/X actions with real-world consequences.

Confidence: 87%Severity: 62%

Audit Metadata

Analyzed At

Jul 23, 2026, 06:05 PM

Package URL

pkg:socket/skills-sh/magentosh%2Fskills%2Finfsh-cli%2F@d66cdb53eca21b67498f48e19d56bc59a7fe7bb94b4f1d38ffc93e4703b46cbd