skills/athina-ai/goose-skills/goose-graphics/Socket

goose-graphics

Warn

Audited by Socket on Jul 2, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The stated graphics-rendering purpose is coherent, and the skill does not ask for disproportionate credentials, but its footprint depends heavily on executing third-party packages and consuming community-published remote specs that can steer agent behavior and file generation. The main risk is supply-chain and indirect prompt injection, not confirmed malware.

Confidence: 80%Severity: 62%

Audit Metadata

Analyzed At

Jul 2, 2026, 06:18 AM

Package URL

pkg:socket/skills-sh/athina-ai%2Fgoose-skills%2Fgoose-graphics%2F@aee446a695c9fadba9ecbda469a4cad1baa88d188462cc724efeff7860a69eca