ssh-server-admin
Warn
Audited by Socket on Mar 15, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The overall capability matches an SSH administration skill, and primary data flows go directly to user-designated SSH servers rather than covert endpoints. However, the skill weakens trust and credential hygiene by recommending a third-party sshpass tap on macOS and by passing passwords on command lines or into a local helper, while also enabling impactful remote administration and tunneling. Coherent purpose, but medium-high security risk due to credential handling and avoidable supply-chain choices.
Confidence: 88%Severity: 68%
Audit Metadata