cc-connect-ai-bridge
Warn
Audited by Socket on Mar 28, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the core bridge concept is coherent, but the skill materially expands an AI agent's remote-control surface by exposing local agents and shell-capable workflows to external messaging input. The biggest concerns are transitive AI-driven installation from a raw GitHub document and indirect prompt injection/autonomous command execution via chat, not confirmed malware or overt credential theft.
Confidence: 84%Severity: 72%
Audit Metadata