skills/ciciliaeth/claude-skills/product-skills/Socket

product-skills

Warn

Audited by Socket on Aug 21, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s stated purpose is benign and mostly aligned with local product/UX workflows, but its recommended installation relies on an unpinned third-party npm CLI from a different publisher, creating medium supply-chain and transitive-trust risk. No direct credential harvesting or malicious data flow is evident in the provided content.

Confidence: 85%Severity: 58%

Audit Metadata

Analyzed At

Aug 21, 2026, 05:05 AM

Package URL

pkg:socket/skills-sh/ciciliaeth%2Fclaude-skills%2Fproduct-skills%2F@b80b10077165d79d430454c69ce1db5ff87ea83f35901afe2fc54506b9043eed