remote

Warn

Audited by Socket on Apr 10, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

该技能与其“远程 SSH 访问/诊断”目的基本一致,未见明显凭据中转或伪装成无关用途的恶意行为;但它要求并复用服务器密码、具备远程命令执行能力,且 Windows 依赖第三方 `sshpass-win32`、核心脚本未提供,整体应判为中等偏高风险而非恶意。

Confidence: 85%Severity: 68%
Audit Metadata
Analyzed At
Apr 10, 2026, 04:30 PM
Package URL
pkg:socket/skills-sh/karthrand%2Fkarthrand-ai-public%2Fremote%2F@c77b47535d8496343f91b84578bf2f6398a90851