skills/alvarovillalbaa/plugins/taste/Socket

taste

Warn

Audited by Socket on Jul 5, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The stated purpose is coherent for a design taste skill, but it unnecessarily extends trust by instructing installation of multiple external skills through a repo-local script whose behavior is not visible here. Main risk is transitive skill installation and partially unverifiable supply-chain behavior, not confirmed malware or direct credential theft in the provided content.

Confidence: 85%Severity: 64%

Audit Metadata

Analyzed At

Jul 5, 2026, 04:26 PM

Package URL

pkg:socket/skills-sh/alvarovillalbaa%2Fplugins%2Ftaste%2F@58bcf3229eab07fd77aa2d13270f43432ce88a9179fa6db12c97f24f7554f377