avira-security-loader-2026-deployment

Warn

Audited by Socket on Aug 4, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is plausible, but the actual footprint depends on downloading and executing an unverifiable Windows executable from an unrelated personal GitHub Pages site rather than an official Avira-owned source. The skill also elevates privileges, creates SYSTEM persistence, and supports credentialed remote deployment, making the scope disproportionate and the supply-chain risk high.

Confidence: 94%Severity: 95%
Audit Metadata
Analyzed At
Aug 4, 2026, 08:07 PM
Package URL
pkg:socket/skills-sh/Aradotso%2Fsecurity-skills%2Favira-security-loader-2026-deployment%2F@237e59c3e4b82de5b0a2e5ecb30ce5db9a01dde2ce58b583dbd24bb1d5de34ac
Security Audit — socket — avira-security-loader-2026-deployment