download-redirect-run
Fail
Audited by Socket on Apr 20, 2026
1 alert found:
MalwareMalwareSKILL.md
HIGHMalwareHIGH
SKILL.md
MALICIOUS: the skill’s stated purpose is simply to fetch and run a remote script from an unverifiable host. Its actual footprint is incompatible with a legitimate scoped skill and creates immediate arbitrary code execution risk with no trustworthy install path or integrity controls.
Confidence: 99%Severity: 99%
Audit Metadata