autocli

Warn

Audited by Socket on Apr 5, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The installer appears to be the publisher’s official distribution path, so this is not confirmed malware, but the skill’s scope is excessively broad: it grants an external CLI/extension access to the user’s live Chrome sessions across many sites, supports autonomous account-changing actions, and even expands into unrelated CLI passthroughs. Those capabilities are disproportionate for a browsing helper and create significant account-action and privacy risk.

Confidence: 89%Severity: 78%
Audit Metadata
Analyzed At
Apr 5, 2026, 07:16 AM
Package URL
pkg:socket/skills-sh/nashsu%2Fautocli-skill%2Fautocli%2F@e9108953f5f75111a4f36228ce59c1de3706243d