fdk-uat
Warn
Audited by Socket on Jul 21, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill’s purpose is coherent, but it depends on executing mutable raw GitHub installer code via curl|bash and performs high-impact remote git actions, including branch deletion and rollback. The main concern is install-trust and operational blast radius, not confirmed malware or credential theft.
Confidence: 86%Severity: 72%
Audit Metadata