claude-code

Warn

Audited by Socket on Sep 5, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s core purpose matches Claude Code orchestration, and the main CLI install path is official, but it disproportionately instructs the agent to bypass safety prompts and automate consent for `--dangerously-skip-permissions`. The result is a medium-high security risk from autonomy and external tool execution rather than confirmed malware.

Confidence: 90%Severity: 62%
Audit Metadata
Analyzed At
Sep 5, 2026, 12:07 PM
Package URL
pkg:socket/skills-sh/zapabob%2Fskills%2Fclaude-code%2F@fef18b4b16b66839f3929e15616a60cbc3ecbf4faed111585ebcb51d3e10fc17