setup-pinnacle-remote-tool

Warn

Audited by Socket on Oct 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Purpose and capabilities mostly align: this is a deployment/share guide for a ToolUniverse remote tool. The main concern is install and execution trust: it installs remote dependencies and a direct wheel from custom infrastructure, then uses credentials to authenticate/share through that ecosystem. That makes the skill suspicious from a supply-chain perspective, but there is no clear evidence of credential theft, stealth, or behavior fundamentally incompatible with its stated purpose.

Confidence: 87%Severity: 72%
Audit Metadata
Analyzed At
Oct 11, 2026, 05:29 PM
Package URL
pkg:socket/skills-sh/mims-harvard%2Ftooluniverse%2Fsetup-pinnacle-remote-tool%2F@907885e1b829a6c2b363e6978be0813cbc11adff39237dc4bd7b6823f2c55de2