opper-cli
Warn
Audited by Socket on Oct 14, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill is largely coherent with its stated Opper CLI purpose and uses same-org official sources, but it meaningfully expands trust by fetching updated remote instructions, installing additional skills, and launching/installing third-party agent CLIs while routing auth/model traffic through Opper. This is not confirmed malware, but it is a medium-high security risk due to transitive installs and credential-forwarding behavior.
Confidence: 90%Severity: 74%
Audit Metadata