research

Warn

Audited by Socket on Jun 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose is coherent, and the Gemini CLI dependency appears official and verifiable, so this is not malware. Risk comes from delegated autonomy, `--yolo` execution, and forwarding full conversation context to an external CLI/service for processing.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 22, 2026, 02:55 PM
Package URL
pkg:socket/skills-sh/TheSethRose%2Fclawdbot-backup%2Fresearch%2F@ab2fff9846c99811cd9deb18353197a7ec08cc243779d48c6b2cfb3bb2bd382e
Security Audit — socket — research