pdf

Warn

Audited by Socket on Jul 7, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

该技能的目的与能力基本一致：把本地 Markdown/HTML 转为 PDF。主要问题是安装信任链：它要求下载并安装个人 GitHub 仓库发布的外部二进制，属于黑盒 CLI 供应链风险；不过未索取凭证、未见异常数据路由或明显窃取行为。综合判断为可疑但非确认恶意。

Confidence: 89%Severity: 78%

Audit Metadata

Analyzed At

Jul 7, 2026, 01:08 AM

Package URL

pkg:socket/skills-sh/mnhkahn%2Fcyeam-cli%2Fpdf%2F@b3a5fc7230ecc29bf31ece062603b7d6290dcf037498c25746573b0b34220e9e