critique

Warn

Audited by Socket on Sep 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The visible skill is a benign design-critique guide, but it explicitly initiates transitive installation of other skills through an unseen local installer and registries. That is disproportionate to a critique-only role and introduces medium supply-chain and trust-chain risk, though there is no clear evidence of credential theft or confirmed malware in the provided content.

Confidence: 85%Severity: 62%
Audit Metadata
Analyzed At
Sep 19, 2026, 09:46 AM
Package URL
pkg:socket/skills-sh/alvarovillalbaa%2Fplugins%2Fcritique%2F@e7111268ea1d4eb8d878da4861e9ab42ce27d5498af6b26d3cf9c0c144e073cc