setup-expert-feedback-remote-tool

Warn

Audited by Socket on Aug 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the core setup steps are mostly coherent for a remote-tool deployment skill, but the optional Connect path installs an unverifiable wheel from a custom domain and then uses it to handle platform credentials and relay traffic. That creates a high supply-chain and credential-forwarding risk disproportionate to a normal documented PyPI-based setup flow.

Confidence: 87%Severity: 86%
Audit Metadata
Analyzed At
Aug 24, 2026, 08:21 AM
Package URL
pkg:socket/skills-sh/mims-harvard%2Ftooluniverse%2Fsetup-expert-feedback-remote-tool%2F@b0a2357055e084c6e69589099eed1e166cb74125add22e3624e04a44eb7e9576
Security Audit — socket — setup-expert-feedback-remote-tool