rhwp-advanced
Warn
Audited by Socket on Sep 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the stated HWP-debugging purpose is plausible, but this stub outsources its real instructions to a remotely fetched CLI package, reducing transparency and making behavior mutable over time. The install path appears same-org and documented, so this is more a trust and reviewability problem than confirmed maliciousness.
Confidence: 86%Severity: 58%
Audit Metadata