opper-cli

Warn

Audited by Socket on Oct 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is largely coherent with its stated Opper CLI purpose and uses same-org official sources, but it meaningfully expands trust by fetching updated remote instructions, installing additional skills, and launching/installing third-party agent CLIs while routing auth/model traffic through Opper. This is not confirmed malware, but it is a medium-high security risk due to transitive installs and credential-forwarding behavior.

Confidence: 90%Severity: 74%
Audit Metadata
Analyzed At
Oct 14, 2026, 09:53 AM
Package URL
pkg:socket/skills-sh/opper-ai%2Fopper-skills%2Fopper-cli%2F@707c81428f7718b8eeb58d1c875de97d952be15a9528a14b1dc4e8964d3eb047