open-claudecode-research

Warn

Audited by Socket on Jul 30, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated research purpose only partly matches the footprint, but the critical issue is trust: it asks users to clone and run an unofficial reconstructed Claude Code runtime from a personal repo, then supply Anthropic credentials and optionally route them through arbitrary proxies. That combination is disproportionate and creates strong supply-chain and credential-interception risk even without explicit malicious code shown.

Confidence: 91%Severity: 90%
Audit Metadata
Analyzed At
Jul 30, 2026, 01:05 AM
Package URL
pkg:socket/skills-sh/Aradotso%2Fclaude-code-skills%2Fopen-claudecode-research%2F@63557469548defb23f315bb6daf3fb00b4a05f350fa9ff334d766b723dc53a32