runpod-companion-clis
Warn
Audited by Socket on Nov 7, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The skill is broadly aligned with its Runpod companion-CLI purpose, and its primary endpoints and official installer sources are coherent. The optional community transfer tool is the main concern because it receives Runpod credentials; treat this as high supply-chain and credential-forwarding risk, while the supplied material does not confirm malicious behavior.
Confidence: 93%Severity: 82%
Audit Metadata