homework

Warn

Audited by Socket on Oct 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The homework workflow is broadly aligned with its stated purpose, but it relies on an opaque `cyeam` CLI for Trello login, downloads, and card creation, and the provided evidence does not establish a clear official package-registry or verifiable release path for that executable. Because this black-box CLI handles Trello credentials and student submission data, the skill carries high supply-chain and credential-forwarding risk despite otherwise coherent behavior.

Confidence: 85%Severity: 84%
Audit Metadata
Analyzed At
Oct 24, 2026, 09:59 AM
Package URL
pkg:socket/skills-sh/mnhkahn%2Fcyeam-cli%2Fhomework%2F@5e8d532b611f110145b67778c2e0d9139f26033ed0d4c1ac19f4680dd8d06921