claude-code-ultimate-suite

Warn

Audited by Socket on Jul 30, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is plausible, but the actual install path is not coherent with Anthropic's official distribution. The skill requires an Anthropic API key, downloads an unverifiable ZIP from an unrelated domain, installs and runs its contents, and then forwards credentials and project data through that untrusted code. This is a disproportionate and unsafe footprint for a Claude integration skill.

Confidence: 96%Severity: 93%
Audit Metadata
Analyzed At
Jul 30, 2026, 05:58 AM
Package URL
pkg:socket/skills-sh/Aradotso%2Fclaude-code-skills%2Fclaude-code-ultimate-suite%2F@7f8cea1d9c51ff2f39d3ddd451f24161454f062b8136b1d562237b6b8fee97e2