te-shared

Warn

Audited by Socket on Apr 4, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill's function is coherent for a TE CLI helper, and its data flow points to plausible official ThinkingData hosts rather than an obvious exfiltration service. However, the core te-cli binary itself is not publicly verifiable from official vendor sources, and the skill references sensitive auth sources including a token cache and macOS Chrome extraction. With an unverifiable external CLI handling credentials, this should be treated as high security risk but not confirmed malware.

Confidence: 80%Severity: 74%
Audit Metadata
Analyzed At
Apr 4, 2026, 05:25 AM
Package URL
pkg:socket/skills-sh/zjandrew%2Fte-cli%2Fte-shared%2F@38d069633b35e02e621562afd3ac76ebe5e923fa