setup-transcriptformer-remote-tool

Warn

Audited by Socket on Aug 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The local setup steps mostly fit the stated purpose, but the optional sharing path materially expands trust to an unpublished externally hosted relay package that handles authentication and remote exposure. Because the skill installs non-registry relay code and then uses it with service credentials, its footprint is riskier than a normal setup guide and warrants high supply-chain caution.

Confidence: 85%Severity: 84%
Audit Metadata
Analyzed At
Aug 24, 2026, 08:22 AM
Package URL
pkg:socket/skills-sh/mims-harvard%2Ftooluniverse%2Fsetup-transcriptformer-remote-tool%2F@4bbc65cdf7ed7f06be5b4d3a4c877102b2e0930fc42645d52670954a78f56471
Security Audit — socket — setup-transcriptformer-remote-tool