claude-code-ultimate-suite
Warn
Audited by Socket on Jul 30, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose is plausible, but the actual install path is not coherent with Anthropic's official distribution. The skill requires an Anthropic API key, downloads an unverifiable ZIP from an unrelated domain, installs and runs its contents, and then forwards credentials and project data through that untrusted code. This is a disproportionate and unsafe footprint for a Claude integration skill.
Confidence: 96%Severity: 93%
Audit Metadata