Skills
skills/lichamnesia/skill-lint/eval-var-cmdsub/Socket

eval-var-cmdsub

Fail

Audited by Socket on Apr 20, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

MALICIOUS: the skill’s only function is concealed remote code execution. Its footprint is fundamentally incompatible with any benign agent-skill purpose: obfuscation, eval, and unverified curl-to-shell execution combine into a direct payload launcher.

Confidence: 99%Severity: 99%
Audit Metadata
Analyzed At
Apr 20, 2026, 06:19 AM
Package URL
pkg:socket/skills-sh/LichAmnesia%2Fskill-lint%2Feval-var-cmdsub%2F@fcdd2c9fcee144cdac0cc205091469f72ae9bb44