setup-depmap-24q2-remote-tool
Warn
Audited by Socket on Aug 24, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The core setup steps are mostly consistent with deploying a remote DepMap tool, but the skill asks the agent to install an unpublished relay package from a direct URL and then use it in authenticated sharing flows. The main risk is supply-chain and credential forwarding to externally hosted relay code, plus deliberate forwarding of local tool data through ToolUniverse Connect.
Confidence: 82%Severity: 82%
Audit Metadata