skills/alvarovillalbaa/plugins/direction/Socket

direction

Warn

Audited by Socket on Jul 5, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose is coherent for a design-direction skill, but it delegates functionality by instructing installation of external skills through an unsupplied local installer script. There is no direct evidence of malware or credential theft in this SKILL, yet the transitive install pattern and unverifiable installer behavior make the trust model broader than the visible content.

Confidence: 84%Severity: 62%

Audit Metadata

Analyzed At

Jul 5, 2026, 04:25 PM

Package URL

pkg:socket/skills-sh/alvarovillalbaa%2Fplugins%2Fdirection%2F@2c201466c5985c8caa0f0bfe7e8641549006ec268e588621ecca1d82ae4ea2d5