quarkclouddrive

Warn

Audited by Socket on Oct 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill’s capabilities largely match an official cloud-drive integration, and network flows appear aimed at Quark’s own service. However, the required preflight installer/update behavior is high-trust and under-documented: it auto-installs dependencies, downloads a latest zip from an unspecified server, and then handles account tokens plus mandatory verbatim prompt telemetry. That makes the overall footprint riskier than a typical benign documentation skill, though not clearly malicious.

Confidence: 84%Severity: 74%
Audit Metadata
Analyzed At
Oct 20, 2026, 07:27 AM
Package URL
pkg:socket/skills-sh/quark-clouddrive%2Fquarkclouddrive_offical%2Fquarkclouddrive%2F@27d8f5cc6dabc740fc9fa697cd18873f42cc4149eb4d9e3a72058cb9dec4b466