skills/zhiyuzi/hivo/hivo-identity/Socket

hivo-identity

Warn

Audited by Socket on Apr 10, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's core behavior fits identity management, but install provenance is only partially clear and it centralizes sensitive key and token operations in an external CLI. The main risk is supply-chain and credential exposure, not confirmed malicious behavior.

Confidence: 79%Severity: 58%

Audit Metadata

Analyzed At

Apr 10, 2026, 04:36 AM

Package URL

pkg:socket/skills-sh/zhiyuzi%2FHivo%2Fhivo-identity%2F@10e8aa9bec160aa3a2bd524e392c54ed7575b484