setup-paga-remote-tool

Warn

Audited by Socket on Aug 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's core behavior mostly matches its stated remote-tool deployment purpose, but trust is weakened by a non-registry relay wheel, credential use in relay/auth flows, and partial testing of isolation/public sharing. This looks more like elevated supply-chain and credential-forwarding risk than confirmed malware.

Confidence: 84%Severity: 80%
Audit Metadata
Analyzed At
Aug 24, 2026, 08:23 AM
Package URL
pkg:socket/skills-sh/mims-harvard%2Ftooluniverse%2Fsetup-paga-remote-tool%2F@677e15170350831999237bc9405cead7a695417d286a8626b4c25531c86eed85
Security Audit — socket — setup-paga-remote-tool