eve-local-dev-loop
Warn
Audited by Socket on Mar 13, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The local Docker Compose portion is coherent and benign, but the skill’s staging handoff depends on an Eve CLI that was not independently verified as an official, auditable distribution. Because the skill also forwards secrets to that CLI, it carries high security risk under the required scoring rules, though there is not enough evidence to call it confirmed malware.
Confidence: 84%Severity: 82%
Audit Metadata