ssh-server-admin

Warn

Audited by Socket on Mar 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The overall capability matches an SSH administration skill, and primary data flows go directly to user-designated SSH servers rather than covert endpoints. However, the skill weakens trust and credential hygiene by recommending a third-party sshpass tap on macOS and by passing passwords on command lines or into a local helper, while also enabling impactful remote administration and tunneling. Coherent purpose, but medium-high security risk due to credential handling and avoidable supply-chain choices.

Confidence: 88%Severity: 68%
Audit Metadata
Analyzed At
Mar 15, 2026, 11:11 AM
Package URL
pkg:socket/skills-sh/HouseGarofalo%2Fclaude-code-base%2Fssh-server-admin%2F@43df106b753068e92e3d6fc3b70655c1e557ba24