use-trash

Fail

Audited by Socket on Mar 3, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

The code fragment is aligned with its stated purpose of enabling safer deletion by using trash/trash-cli and providing installation/guidance steps with explicit user consent flows. It relies on standard package managers and includes explicit fallback guidance rather than silent execution, which is appropriate for a safety-focused feature. Overall, it is benign with medium security risk due to external installations being required, but within expected, transparent boundaries for a utility enhancement.

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Mar 3, 2026, 04:18 PM
Package URL
pkg:socket/skills-sh/ar1g%2Fskill-use-trash%2Fuse-trash%2F@306ecf296c407d5b383ee6454fcb61e3739f7b10