share

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the planned behavior is broadly consistent with a session-sharing skill, but it handles sensitive local transcripts, forwards secrets from 1Password into external CLIs, and produces remote share links. Risk is elevated by broad data scope, optional Telegram dissemination, unpinned tooling, and self-modifying instructions, though there is no clear evidence of hidden credential theft or off-purpose endpoints.

Confidence: 83%Severity: 61%
Audit Metadata
Analyzed At
Apr 21, 2026, 02:59 AM
Package URL
pkg:socket/skills-sh/terrylica%2Fcc-skills%2Fshare%2F@baaab724520df4ea3e58d4fc7de2c5ca3602f9f0