holyclaude-ai-workstation

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose fits a dev workstation, but the actual footprint is overbroad and trust-heavy. A personal third-party container and CloudCLI intermediary receive multiple vendors' credentials, persistent config mounts, workspace access, and reduced sandboxing; this is coherent as a convenience bundle but disproportionate and high-risk for credential exposure and opaque supply-chain trust.

Confidence: 88%Severity: 84%
Audit Metadata
Analyzed At
Sep 14, 2026, 10:37 AM
Package URL
pkg:socket/skills-sh/reason-machines%2Ftrending-skills%2Fholyclaude-ai-workstation%2F@1ee1b9e0719c306af8b7c0a844b0bf0e76b7c1d54f52ed91def0ec3bd932afd0