runpod-companion-clis

Warn

Audited by Socket on Nov 7, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is broadly aligned with its Runpod companion-CLI purpose, and its primary endpoints and official installer sources are coherent. The optional community transfer tool is the main concern because it receives Runpod credentials; treat this as high supply-chain and credential-forwarding risk, while the supplied material does not confirm malicious behavior.

Confidence: 93%Severity: 82%
Audit Metadata
Analyzed At
Nov 7, 2026, 04:05 PM
Package URL
pkg:socket/skills-sh/runpod%2Frunpod-plugins-official%2Frunpod-companion-clis%2F@8bb21c8b18036c552bcaa6e20d810eaf2a7e870f934f7e53e98e5d1e10386efa