listenhub-cli

Warn

Audited by Socket on Apr 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated routing purpose is narrower than the actual footprint. The main issue is a silent auto-install and auto-login flow for a CLI package whose official publisher relationship is not verified by the provided evidence, plus transitive delegation to other skills. This is not confirmed malware, but it is higher-risk than a normal router skill.

Confidence: 84%Severity: 71%
Audit Metadata
Analyzed At
Apr 8, 2026, 09:28 AM
Package URL
pkg:socket/skills-sh/marswaveai%2Fskills%2Flistenhub-cli%2F@f1d5970f6248663f2791fb242324430b141cebab