skills/jeremylongshore/claude-code-plugins-plus-skills/juicebox-install-auth/Socket

juicebox-install-auth

Warn

Audited by Socket on Mar 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s stated purpose is coherent with installing an SDK and setting an API key, and there is no obvious exfiltration path beyond normal API use. However, trust in the actual SDK packages is not well verified: the npm/PyPI names and docs references appear inconsistent or unavailable, so the skill asks users to forward credentials into dependencies whose official provenance is unclear.

Confidence: 82%Severity: 56%

Audit Metadata

Analyzed At

Mar 23, 2026, 06:33 AM

Package URL

pkg:socket/skills-sh/jeremylongshore%2Fclaude-code-plugins-plus-skills%2Fjuicebox-install-auth%2F@79756f8fe46df02182356b97d7441d2ed2a728ed