autocli

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s broad authenticated browsing/posting purpose is internally coherent, but its footprint is disproportionate: it installs an unpinned third-party CLI from a personal GitHub raw script, grants that tool access to the user’s live Chrome session, and enables many autonomous real-world actions across dozens of services. This looks more like a high-risk automation gateway than a narrowly scoped browsing helper.

Confidence: 88%Severity: 83%
Audit Metadata
Analyzed At
Apr 21, 2026, 06:06 AM
Package URL
pkg:socket/skills-sh/nashsu%2FAutoCLI-skill%2Fautocli%2F@d6ca200b5ba65b60cf68153e88b2e9efb7f0f441