setup-paga-remote-tool
Warn
Audited by Socket on Aug 24, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill's core behavior mostly matches its stated remote-tool deployment purpose, but trust is weakened by a non-registry relay wheel, credential use in relay/auth flows, and partial testing of isolation/public sharing. This looks more like elevated supply-chain and credential-forwarding risk than confirmed malware.
Confidence: 84%Severity: 80%
Audit Metadata