skills/shaun-z/auto-claude-code-research-in-sleep/qzcli/Socket

qzcli

Warn

Audited by Socket on Apr 19, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s actions fit its stated purpose, but it combines broad Bash(*) permissions with credential handling and installation from a personal GitHub repo. The main concern is install/execution trust and possible credential exposure or redirection via configurable API endpoints, not confirmed malicious behavior.

Confidence: 82%Severity: 66%

Audit Metadata

Analyzed At

Apr 19, 2026, 03:14 AM

Package URL

pkg:socket/skills-sh/Shaun-Z%2FAuto-claude-code-research-in-sleep%2Fqzcli%2F@520d303d00523c7fed1670e83ab01f875f75edbe