analyticscli-cli

Warn

Audited by Socket on Mar 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s functional scope is coherent for analytics querying and it includes reasonable guardrails, but trust is weakened by distribution from a personal GitHub skills repo and an unverified publisher relationship to the referenced CLI package. No clear credential theft or malicious exfiltration is present; the main issues are supply-chain and transitive-install trust.

Confidence: 79%Severity: 57%
Audit Metadata
Analyzed At
Mar 22, 2026, 06:20 AM
Package URL
pkg:socket/skills-sh/wotaso%2Fanalyticscli-skills%2Fanalyticscli-cli%2F@318b3a0c18b36fbc56aa864a5a15ea8173dc0e68
Security Audit — socket — analyticscli-cli