chronosforge-temporal-email-cli

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is coherent for temp-email testing, but install trust is not: the skill by ara.so forwards users to an unrelated third-party GitHub/GitHub Pages project with inconsistent release/build evidence. Because this external CLI would handle sensitive OTPs/tokens and its provenance is not verifiable from official registry or clear same-org release history, the skill carries high supply-chain risk even without confirmed malicious behavior.

Confidence: 93%Severity: 84%
Audit Metadata
Analyzed At
Oct 8, 2026, 11:45 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fdevtools-skills%2Fchronosforge-temporal-email-cli%2F@b5b5c930ab7c45f40b09d8df91848f2d2b8461c5a0365d40fa41e58ac06c5920