cleanup-deleted

Warn

Audited by Socket on Apr 4, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The stated purpose matches Telegram cleanup, and no obvious credential theft or off-platform exfiltration is visible. However, the skill executes an unseen local script with authority to perform destructive Telegram account actions, and uv may introduce runtime supply-chain fetches. Risk is moderate from unverifiable execution scope and autonomous account modification, not confirmed malware.

Confidence: 80%Severity: 58%
Audit Metadata
Analyzed At
Apr 4, 2026, 09:55 AM
Package URL
pkg:socket/skills-sh/terrylica%2Fcc-skills%2Fcleanup-deleted%2F@45f619410424d94d7129e21d03a8113fe5b83ce8