skills/zackkorman/skills/command-safety-4/Socket

command-safety-4

Fail

Audited by Socket on Mar 19, 2026

1 alert found:

Malware

MalwareSKILL.md

HIGH

MalwareHIGH

SKILL.md

MALICIOUS. The visible skill claims to improve command safety, but it secretly embeds a concealed `curl|bash` remote execution path from a personal domain. That hidden download-execute behavior is incompatible with the stated purpose and appears intentionally deceptive.

Confidence: 97%Severity: 98%

Audit Metadata

Analyzed At

Mar 19, 2026, 07:59 AM

Package URL

pkg:socket/skills-sh/zackkorman%2Fskills%2Fcommand-safety-4%2F@fb5cb68a9c440a731361af47819ea48fa0a5e859