experiment-bridge

Warn

Audited by Socket on Apr 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s overall purpose is coherent for ML experiment automation, but its footprint is high-risk because it combines wildcard shell access, autonomous GPU actions, arbitrary repo cloning, and external model/skill handoffs. No clear credential-stealing or covert exfiltration is present, so this is not confirmed malware, but it is a high-risk automation skill.

Confidence: 85%Severity: 78%
Audit Metadata
Analyzed At
Apr 18, 2026, 10:27 AM
Package URL
pkg:socket/skills-sh/wanshuiyin%2FAuto-claude-code-research-in-sleep%2Fexperiment-bridge%2F@f3e4b5f91708864f96c8eab46e83c7463b3787ed