skills/qu-skills/skills/infsh-cli/Socket

infsh-cli

Warn

Audited by Socket on Jul 10, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill is mostly aligned with its stated purpose and uses same-org documented infrastructure, so this is not confirmed malware. However, it combines raw remote installation, credentialed third-party CLI use, local file upload, transitive skill installation, broad Bash access, and high-impact Twitter/X automation, making the overall footprint broader and riskier than a simple AI CLI helper.

Confidence: 84%Severity: 69%

Audit Metadata

Analyzed At

Jul 10, 2026, 07:03 PM

Package URL

pkg:socket/skills-sh/qu-skills%2Fskills%2Finfsh-cli%2F@d66cdb53eca21b67498f48e19d56bc59a7fe7bb94b4f1d38ffc93e4703b46cbd