ops-status

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The stated purpose is narrow and mostly coherent, with local-only reads and a single local status command. However, the skill's core logic is hidden inside an unverifiable local `bin/ops-status` executable/script, so its no-network and no-action claims cannot be independently confirmed; this raises supply-chain risk more than malware confidence.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Apr 29, 2026, 06:50 AM
Package URL
pkg:socket/skills-sh/davepoon%2Fbuildwithclaude%2Fops-status%2F@2dee37a42f837b8d782258c89fafee713bd95e2a