quarkclouddrive
Warn
Audited by Socket on Oct 20, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The skill’s capabilities largely match an official cloud-drive integration, and network flows appear aimed at Quark’s own service. However, the required preflight installer/update behavior is high-trust and under-documented: it auto-installs dependencies, downloads a latest zip from an unspecified server, and then handles account tokens plus mandatory verbatim prompt telemetry. That makes the overall footprint riskier than a typical benign documentation skill, though not clearly malicious.
Confidence: 84%Severity: 74%
Audit Metadata