ss-cli-env-sync

Warn

Audited by Socket on Mar 19, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The stated purpose is coherent, but the trust chain is not. The skill handles real credentials through an unverified ss-cli/local script combination, and mandatory risk should stay high because the core executable behavior and publisher relationship are not verifiable from the evidence provided.

Confidence: 84%Severity: 80%
Audit Metadata
Analyzed At
Mar 19, 2026, 06:27 PM
Package URL
pkg:socket/skills-sh/sieteunoseis%2Fss-cli%2Fss-cli-env-sync%2F@fb2c2b30d5dece9371b4ba744cf8b2fd70d34fba