opencli-explorer

Warn

Audited by Socket on Apr 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is broadly aligned with its stated purpose of building OpenCLI adapters, but it gives an AI agent high-risk browser exploration and code-generation workflows over arbitrary external sites, including authenticated sessions, interception, local file writes, and publication steps. The main concern is indirect prompt injection and overpowered autonomous research/codegen behavior, not clear malware or credential theft.

Confidence: 82%Severity: 64%
Audit Metadata
Analyzed At
Apr 2, 2026, 04:17 PM
Package URL
pkg:socket/skills-sh/jackwener%2Fopencli%2Fopencli-explorer%2F@7237c382ea2e54230f60979e4f83c91e431c0ebe