skills/jackwener/opencli/opencli-usage/Socket

opencli-usage

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core OpenCLI install and purpose are internally consistent, but this orientation skill authorizes a broad `opencli:*` surface and promotes transitive installation of git-based plugins and external CLIs. Main risk is supply-chain expansion and delegated trust, not confirmed malicious behavior.

Confidence: 84%Severity: 64%

Audit Metadata

Analyzed At

Sep 14, 2026, 06:20 PM

Package URL

pkg:socket/skills-sh/jackwener%2Fopencli%2Fopencli-usage%2F@a65da4f59b48ba2b722b5261c1b49f4f61b3386b6b0da3e38421b2dff83ebc0a