skills/zeabur/zeabur-claude-plugin/zeabur-server-catalog/Socket

zeabur-server-catalog

Warn

Audited by Socket on Mar 14, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: mostly coherent with Zeabur server browsing, and the CLI source appears official, but the skill overreaches by embedding a non-interactive server rental command. Main risk is autonomous real-world action plus unpinned `npx @latest`, not clear malware or credential theft.

Confidence: 89%Severity: 66%

Audit Metadata

Analyzed At

Mar 14, 2026, 11:49 PM

Package URL

pkg:socket/skills-sh/zeabur%2Fzeabur-claude-plugin%2Fzeabur-server-catalog%2F@33e21f557888196581a130b6180c130dd225e500