skills/agentskillexchange/skills/Plop.js Code Generator Orchestrator/Socket

Plop.js Code Generator Orchestrator

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose is plausible, but the install path depends on transitive skill installation from an unverified third-party repo target. The main issue is supply-chain and trust inconsistency rather than overt malicious behavior or credential theft.

Confidence: 84%Severity: 74%

Audit Metadata

Analyzed At

Mar 29, 2026, 03:37 AM

Package URL

pkg:socket/skills-sh/agentskillexchange%2Fskills%2Fplopjs-code-generator-orchestrator%2F@085831b14c148d8f26ec73d355f0deb9005a7a07