configure-ecc

Fail

Audited by Socket on Feb 27, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

The provided ECC configuration/install skill is functionally coherent with its stated purpose as an interactive installer. It uses normal installation patterns (git clone, directory creation, cp operations, verification steps) and avoids hardcoded secrets or unintended data flows. Security risks are low to moderate due to lack of integrity verification for the cloned repository; adding content integrity checks and preflight validations would strengthen security without changing the core function.

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Feb 27, 2026, 05:58 PM
Package URL
pkg:socket/skills-sh/oldwinter%2Fskills%2Fconfigure-ecc%2F@23b41b89f8e86b240d985788be2b02c32edf3bbd