skills/tony363/superclaude/sc-mcp/Socket

sc-mcp

Warn

Audited by Socket on Sep 20, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s capabilities mostly match its orchestration purpose, but its footprint is broad and high-impact. Remote execution, scheduling, multi-app automation, and credential forwarding are substantial risks, and the stale Rube/Composio framing plus unpinned PAL GitHub install path weaken trust even without clear evidence of malware.

Confidence: 85%Severity: 73%

Audit Metadata

Analyzed At

Sep 20, 2026, 08:57 AM

Package URL

pkg:socket/skills-sh/tony363%2Fsuperclaude%2Fsc-mcp%2F@d4c5b1d965b19575fe67e37958905f0520cd44d41ebf3346a6f05313bf74fb4f