fusion-setup

Warn

Audited by Socket on Aug 25, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core skill is largely coherent with its stated purpose and mostly performs local config/file installation, but it carries medium trust risk from transitive skill installation, global agent/plugin modification, and optional third-party routing components like `progrok`. No strong evidence of malware or hidden credential theft in the provided skill text, but the installation and expanded execution footprint are broader than a simple config helper.

Confidence: 83%Severity: 58%
Audit Metadata
Analyzed At
Aug 25, 2026, 01:14 AM
Package URL
pkg:socket/skills-sh/mihneaptu%2Fopencode-fusion%2Ffusion-setup%2F@972e3a8293dd6d27dddb1d196cc7072381d5a4cbd7696eee9ab2a36db42361bc
Security Audit — socket — fusion-setup