electron-squirrel-repackage

Fail

Audited by Socket on Sep 4, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

MALICIOUS: the skill’s stated purpose is to covertly implant a payload into an Electron app, disguise it with benign naming and synchronized metadata, and optionally add persistence before redistributing it through a Squirrel update/install chain. That footprint is incompatible with any reasonable benign packaging skill.

Confidence: 96%Severity: 98%
Audit Metadata
Analyzed At
Sep 4, 2026, 01:16 PM
Package URL
pkg:socket/skills-sh/specterops%2Fskills%2Felectron-squirrel-repackage%2F@50dd6f654e9c2266911fdbf14294ae0cdb84799507833866bbfd139021a6ca73