make-env-setup
Warn
Audited by Socket on Sep 8, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill largely matches its stated setup purpose, but it expands trust to a third-party Homebrew tap, a credential-bearing external CLI, and a transitive skill install. The main risk is supply-chain and credential-routing uncertainty rather than confirmed malware.
Confidence: 85%Severity: 66%
Audit Metadata