raku
Warn
Audited by Socket on Apr 10, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's purpose is legitimate, but it understates that execution depends on the third-party `x` wrapper, which may auto-install Raku via remote bootstrap/download behavior. No credential theft or exfiltration is evident, yet the undocumented install trust chain and lack of pinning make the skill medium risk rather than benign.
Confidence: 89%Severity: 56%
Audit Metadata