tb-init

Warn

Audited by Socket on Apr 12, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

该技能的目的与所需 TeamBition 凭证总体一致,未见明显恶意安装链或第三方中转域名,整体更像正常的初始化工具。但它要求收集并本地保存高敏感凭证,且把联网行为交给未审计的本地脚本处理,带来中等安全风险。结论为 SUSPICIOUS:不是明显恶意,更像有真实用途但信任边界不足的技能。

Confidence: 80%Severity: 58%
Audit Metadata
Analyzed At
Apr 12, 2026, 03:36 AM
Package URL
pkg:socket/skills-sh/KaelZhang321%2Fteambition-agent-toolkit%2Ftb-init%2F@8fdb38a28e875b1c2b87dbb3617615cbeabc419d