design-consultation
Warn
Audited by Socket on Sep 10, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's stated purpose is coherent, but the entry is mainly a loader/advertisement for a separate upstream skill bundle. The main risk is transitive installation from a personal GitHub repo via mutable clone and setup script, which is disproportionate for a simple catalogue entry even though there is no direct credential handling or confirmed malicious behavior here.
Confidence: 87%Severity: 62%
Audit Metadata