setup-expert-feedback-remote-tool
Warn
Audited by Socket on Aug 24, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the core setup steps are mostly coherent for a remote-tool deployment skill, but the optional Connect path installs an unverifiable wheel from a custom domain and then uses it to handle platform credentials and relay traffic. That creates a high supply-chain and credential-forwarding risk disproportionate to a normal documented PyPI-based setup flow.
Confidence: 87%Severity: 86%
Audit Metadata