chronosforge-temporal-email-cli
Warn
Audited by Socket on Oct 8, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose is coherent for temp-email testing, but install trust is not: the skill by ara.so forwards users to an unrelated third-party GitHub/GitHub Pages project with inconsistent release/build evidence. Because this external CLI would handle sensitive OTPs/tokens and its provenance is not verifiable from official registry or clear same-org release history, the skill carries high supply-chain risk even without confirmed malicious behavior.
Confidence: 93%Severity: 84%
Audit Metadata