ae-analysis

Warn

Audited by Socket on May 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s stated purpose matches AE analysis administration, but it relies on an unverifiable external CLI and explicitly routes sensitive tokens to that CLI. Broad write capabilities are plausible for the purpose yet materially increase risk; without verified ae-cli provenance or official distribution evidence, this should be treated as high security risk rather than confirmed malware.

Confidence: 84%Severity: 86%
Audit Metadata
Analyzed At
May 20, 2026, 05:18 AM
Package URL
pkg:socket/skills-sh/ThinkingAIAgenticEngine%2Fae-cli%2Fae-analysis%2F@49be596ff069f4107bccf5dac1738f2196233caa
Security Audit — socket — ae-analysis