screenshot

Warn

Audited by Socket on Sep 10, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The advertised capability is coherent with a screenshot skill and there is no evidence of credential theft or exfiltration, but the entry is only a launcher that instructs transitive installation of upstream skills from mutable GitHub content. Same-org provenance lowers concern, yet the indirect install path and unpinned upstream bundle make this higher risk than a self-contained benign documentation skill.

Confidence: 88%Severity: 56%
Audit Metadata
Analyzed At
Sep 10, 2026, 08:02 PM
Package URL
pkg:socket/skills-sh/attentiondotnet%2Fopen-design%2Fscreenshot%2F@95b027d2f885d1625e3b6d0d065e1e81e7585e911ecf88d2215fd634a7296d14