unity-cli-refresh-commands

Warn

Audited by Socket on Jun 25, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's stated purpose is coherent, and its visible behavior is limited to refreshing a Unity catalog, but it depends on executing a hidden home-directory CLI installed by another skill. The main risk is transitive trust and unverifiable local tooling provenance, not confirmed malicious behavior.

Confidence: 82%Severity: 58%
Audit Metadata
Analyzed At
Jun 25, 2026, 03:34 PM
Package URL
pkg:socket/skills-sh/niqibiao%2Funity-cli-skill%2Funity-cli-refresh-commands%2F@efa8e090348f898c83bc1671672034a27a16fc8414dd3a177e2fb4edf0dfeb90