skills/broomva/skills/creative-review/Socket

creative-review

Warn

Audited by Socket on Jul 1, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the creative-review behavior mostly matches its stated purpose, but the external tool install instruction is inconsistent with the verified official package source, creating a supply-chain trust issue. No credential harvesting, exfiltration endpoint, or clearly malicious behavior is present.

Confidence: 87%Severity: 58%

Audit Metadata

Analyzed At

Jul 1, 2026, 03:33 PM

Package URL

pkg:socket/skills-sh/broomva%2Fskills%2Fcreative-review%2F@c1c593f23b4c72d7feaa773847fd89e8e8245d23f3287fc2cf67c21c7c24f28e