simulator-workflows

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's simulator-management capabilities are largely aligned with its purpose, and there is no clear credential theft or exfiltration path in the text. But it forces all actions through a third-party MCP wrapper instead of Apple's official documented interface, creating moderate supply-chain and delegated-trust risk with limited provenance evidence.

Confidence: 82%Severity: 52%
Audit Metadata
Analyzed At
Mar 29, 2026, 10:29 PM
Package URL
pkg:socket/skills-sh/conorluddy%2Fxclaude-plugin%2Fsimulator-workflows%2F@da1810c0c5e7abae33d4d45f4a32a290fd52e126