brew

Warn

Audited by Socket on Apr 10, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The stated purpose mostly matches package-management behavior, but the skill is misleadingly framed as a Homebrew wrapper while relying on the third-party `x-cmd` tool for key commands. Main risk is install trust and altered mirror/proxy data flows, not confirmed malicious behavior.

Confidence: 88%Severity: 55%
Audit Metadata
Analyzed At
Apr 10, 2026, 05:41 AM
Package URL
pkg:socket/skills-sh/x-cmd%2Fskill%2Fbrew%2F@aa777c1be979b9d36ac4f510565007592dcc7fcf