hey

Pass

Audited by Socket on Jun 18, 2026

Checks
Malicious behaviorInjection, exfiltration, untrusted installs
Security concernsCredential exposure, tool/trust exploitation
Code obfuscationHidden or obfuscated code
Suspicious patternsReconnaissance, excessive autonomy, resource use
Audit Metadata
Analyzed At
Jun 18, 2026, 01:16 PM
Package URL
pkg:socket/skills-sh/soul-brews-studio%2Foracle-skills-cli%2Fhey%2F@63ee55c9ef676bce2a76a331cf4378546a6a2d011f16aa38d8b6de40819e1680
Security Audit — socket — hey