taste

Warn

Audited by Socket on Sep 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is coherent for a design taste skill, but it also acts as a broker for installing many external skills through an unseen local installer. The main risk is transitive trust and partially unverifiable supply-chain behavior, not direct malware or credential theft in this file.

Confidence: 87%Severity: 63%
Audit Metadata
Analyzed At
Sep 19, 2026, 09:47 AM
Package URL
pkg:socket/skills-sh/alvarovillalbaa%2Fplugins%2Ftaste%2F@2297fc32fc74d018eaaed0b28244aafa5f4fc7a3ca89501d6d9bafd023e0a1ff