ss-cli-env-sync
Warn
Audited by Socket on Mar 19, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The stated purpose is coherent, but the trust chain is not. The skill handles real credentials through an unverified ss-cli/local script combination, and mandatory risk should stay high because the core executable behavior and publisher relationship are not verifiable from the evidence provided.
Confidence: 84%Severity: 80%
Audit Metadata