design-consultation

Warn

Audited by Socket on Sep 10, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's stated purpose is coherent, but the entry is mainly a loader/advertisement for a separate upstream skill bundle. The main risk is transitive installation from a personal GitHub repo via mutable clone and setup script, which is disproportionate for a simple catalogue entry even though there is no direct credential handling or confirmed malicious behavior here.

Confidence: 87%Severity: 62%
Audit Metadata
Analyzed At
Sep 10, 2026, 08:02 PM
Package URL
pkg:socket/skills-sh/attentiondotnet%2Fopen-design%2Fdesign-consultation%2F@bccd87f727b54385e5cf273d3cf7f0d814666c189eb352704755d0a8fb4c748f