skills/attentiondotnet/open-design/artifacts-builder/Socket

artifacts-builder

Warn

Audited by Socket on Sep 10, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the local entry is not overtly malicious, but it is mainly a pointer that asks the agent to trust and potentially install a separate upstream skill bundle from GitHub. The main issue is transitive trust and unpinned supply-chain exposure, not direct credential theft or exfiltration in this file.

Confidence: 88%Severity: 64%

Audit Metadata

Analyzed At

Sep 10, 2026, 08:02 PM

Package URL

pkg:socket/skills-sh/attentiondotnet%2Fopen-design%2Fartifacts-builder%2F@270048983c1e46f0238ea3d3bd7a39ae90592e8e925955a2711382a06ba56f1e