threejs-aaa-graphics-builder

Warn

Audited by Socket on Jul 6, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is plausible, but the skill overreaches by mandating unverified dependent skills and an unspecified credential probe as gates to normal graphics decisions. With no explicit install commands or exfiltration endpoints in this text, this is not confirmed malware, but it carries meaningful transitive trust and credential-handling risk.

Confidence: 80%Severity: 62%
Audit Metadata
Analyzed At
Jul 6, 2026, 10:09 PM
Package URL
pkg:socket/skills-sh/chrislaupama%2Fthreejs-game-skills%2Fthreejs-aaa-graphics-builder%2F@691623505059d7dd9386a6e1f5148129d4237e9f9c2246c2a5b1914896a751b4