setup-pinnacle-remote-tool
Warn
Audited by Socket on Aug 24, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill's remote-share behavior matches its purpose, but trust in the install path is weaker than expected because it pulls a credential-adjacent relay package from a custom wheel URL outside PyPI. Data flows are mostly coherent, yet external relay/auth infrastructure and publisher provenance are not fully established from the provided evidence.
Confidence: 84%Severity: 76%
Audit Metadata