semantius-admin
Warn
Audited by Socket on Oct 31, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The skill’s Semantius administration purpose generally matches its API access, workspace operations, and live-model workflow. The primary concern is supply-chain and credential-forwarding risk: it installs a native CLI outside an official package registry and uses it with authentication, while other tool downloads are unpinned and unchecked. Remote artifacts also create prompt-injection exposure, though the skill does not direct the agent to obey their instructions. High security risk is warranted, but the supplied content does not confirm malicious intent.
Confidence: 90%Severity: 82%
Audit Metadata