symcli-skill

Warn

Audited by Socket on Apr 3, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated math/code-analysis purpose is plausible, but the skill’s core capability relies on an unverifiable external CLI with no trustworthy distribution or publisher linkage. No credential theft or exfiltration is shown, yet install/execution trust is weak enough to make the skill high risk.

Confidence: 86%Severity: 82%
Audit Metadata
Analyzed At
Apr 3, 2026, 11:00 AM
Package URL
pkg:socket/skills-sh/thienanblog%2Fawesome-ai-agent-skills%2Fsymcli-skill%2F@9c069da04709af91ffcdbcd0bff11db9d6db2c1a
Security Audit — socket — symcli-skill