devtools-hub-installer

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s purpose broadly matches its capabilities, but install trust is weak: it distributes a privileged Windows installer from a repo with unclear publisher relationship, lacks verification details, and contains inconsistent claims about runtime downloads. Broad admin execution is expected for a provisioning tool, but the provenance and download model make the skill medium-high risk rather than benign.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Oct 8, 2026, 11:47 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fdevtools-skills%2Fdevtools-hub-installer%2F@e597f0ea81b518b61fad122d401a6e4ae8851869ac77c26807974cba83fe68c1