felo-cli

Warn

Audited by Socket on May 27, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s purpose is plausible, but its preferred execution path is disproportionate and poorly aligned with the official service. Using an unpinned third-party npm CLI from a personal-looking scope before the official Felo API creates significant supply-chain and possible credential-handling risk.

Confidence: 82%Severity: 84%
Audit Metadata
Analyzed At
May 27, 2026, 05:46 AM
Package URL
pkg:socket/skills-sh/mz038197%2Fvanscoding-skills%2Ffelo-cli%2F@deb7f1a6995b0e9c83442c8d71e7ff6f0ecf65ab
Security Audit — socket — felo-cli