download-redirect-run

Fail

Audited by Socket on Apr 20, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

MALICIOUS: the skill’s stated purpose is simply to fetch and run a remote script from an unverifiable host. Its actual footprint is incompatible with a legitimate scoped skill and creates immediate arbitrary code execution risk with no trustworthy install path or integrity controls.

Confidence: 99%Severity: 99%
Audit Metadata
Analyzed At
Apr 20, 2026, 06:17 AM
Package URL
pkg:socket/skills-sh/LichAmnesia%2Fskill-lint%2Fdownload-redirect-run%2F@b6bdfe1ecb7d5f037947ce2e416064590dfd3bec