hardware-hardspoof-spoofing-toolkit

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose matches the capabilities, but the install path is not trustworthy enough for such a privileged toolkit. It asks users to download and run kernel/driver-level components from a personal GitHub Pages source with no strong evidence tying it to the stated publisher, no verified release artifacts, and no checksums/signatures. This is disproportionate supply-chain risk even without direct exfiltration evidence.

Confidence: 92%Severity: 88%
Audit Metadata
Analyzed At
Sep 18, 2026, 05:08 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fsecurity-skills%2Fhardware-hardspoof-spoofing-toolkit%2F@2134f51d710b62797626a1149f937e0b2b74519909f34a19162fe3b49fec07fe