verify-ui-change-in-cloud

Warn

Audited by Socket on Aug 26, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is broadly aligned with its stated purpose of remote UI verification for the Warp repo, and it uses same-org tooling rather than obvious malicious installers. However, it expands scope by autonomously spawning a remote computer-use agent, depends on a hard-coded non-public environment ID, and chains trust into another skill, so the remote execution footprint is higher than a simple local verification helper.

Confidence: 82%Severity: 56%
Audit Metadata
Analyzed At
Aug 26, 2026, 09:09 AM
Package URL
pkg:socket/skills-sh/warpdotdev%2Fwarp%2Fverify-ui-change-in-cloud%2F@18f00a7ab2915a80cc96d68fb29fb868e2202c37f5b0cf4038d6584edac71f50
Security Audit — socket — verify-ui-change-in-cloud