awaken

Warn

Audited by Socket on Apr 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s core purpose is coherent, but its footprint is high-risk for an AI agent. It combines mutable curl|bash installation, broad permission changes, ingestion of untrusted GitHub content, writes outside the repo, and autonomous push/public-post steps. This looks more like an aggressive onboarding/automation ritual than malware, but it should require tighter approval and safer install paths.

Confidence: 87%Severity: 79%
Audit Metadata
Analyzed At
Apr 17, 2026, 02:33 AM
Package URL
pkg:socket/skills-sh/soul-brews-studio%2Foracle-skills-cli%2Fawaken%2F@f89dae88767648e1d4368e862f4a1ee9fd1776fd
Security Audit — socket — awaken