bookstrap-archive-project

Warn

Audited by Socket on Apr 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s stated archive/export behavior is mostly coherent, but the actual Bookstrap command provenance is unverified and the tool may handle sensitive archives, passwords, and cloud credentials. The main concern is install/execution trust and opaque credential handling rather than confirmed malware.

Confidence: 82%Severity: 64%
Audit Metadata
Analyzed At
Apr 16, 2026, 08:07 AM
Package URL
pkg:socket/skills-sh/mikkelkrogsholm%2Fbookstrap%2Fbookstrap-archive-project%2F@c6e4379042781cbd32ea4915d028abd359af5dc9