podwise

Warn

Audited by Socket on Oct 18, 2026

1 alert found:

Anomaly
AnomalyLOW
references/installation.md

The supplied content is installation documentation and contains no direct evidence of malware. The curl-to-shell command, unpinned Homebrew tap, and unverified binaries introduce meaningful supply-chain risk because compromised upstream content could execute with local privileges. Review and verify the installer, pin versions or commits, validate checksums or signatures, and avoid exposing API keys during configuration display.

Confidence: 98%Severity: 58%
Audit Metadata
Analyzed At
Oct 18, 2026, 06:42 AM
Package URL
pkg:socket/skills-sh/memorysaver%2Fdotfiles%2Fpodwise%2F@edc10e5cc60f4bc58483bc684d3cd828f1ed876b5d2724f1a6fa9796daa48557