app-store-screenshots
Warn
Audited by Socket on Mar 21, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s core purpose is coherent, and the `infsh` installer appears to be the publisher’s official path rather than an arbitrary third-party payload. Risk comes from mutable curl|sh installation, credential use through an external CLI, broad Bash permissioning, and transitive installation of additional skills that extend trust beyond the stated screenshot task.
Confidence: 84%Severity: 56%
Audit Metadata