skills/blockmatic/basilic-skills/workflow/Socket

workflow

Warn

Audited by Socket on Oct 3, 2026

1 alert found:

Security

Securityw-v0/SKILL.md

MEDIUM

SecurityMEDIUM

w-v0/SKILL.md

SUSPICIOUS: The skill’s purpose is plausible, but it routes prompt content from local files to w-v0.dev rather than an official Vercel v0 endpoint. With no evidence that w-v0.dev is operated by Vercel, the main risk is unintended disclosure of repo/context data to an unrelated third party.

Confidence: 90%Severity: 74%

Audit Metadata

Analyzed At

Oct 3, 2026, 04:50 PM

Package URL

pkg:socket/skills-sh/blockmatic%2Fbasilic-skills%2Fworkflow%2F@038b86845ac6d462ee9a797b24ce878c5ac3ba3cdeb26ab1b34e4c511e6e610a