setup-depmap-24q2-remote-tool

Warn

Audited by Socket on Aug 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The core setup steps are mostly consistent with deploying a remote DepMap tool, but the skill asks the agent to install an unpublished relay package from a direct URL and then use it in authenticated sharing flows. The main risk is supply-chain and credential forwarding to externally hosted relay code, plus deliberate forwarding of local tool data through ToolUniverse Connect.

Confidence: 82%Severity: 82%
Audit Metadata
Analyzed At
Aug 24, 2026, 08:21 AM
Package URL
pkg:socket/skills-sh/mims-harvard%2Ftooluniverse%2Fsetup-depmap-24q2-remote-tool%2F@f9d1e8a5eea33824377c9700ffe3a9cb15f2e3a0c10d16984813c2477b67b2ee
Security Audit — socket — setup-depmap-24q2-remote-tool