skills/cold-iq/coldiq-s-gtm-skills/design-studio/Socket

design-studio

Warn

Audited by Socket on Aug 4, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the visible launcher behavior is benign, but the skill's real footprint is delegation to multiple unspecified sub-skills that may install packages and forward tokens. The main concern is transitive trust and opaque downstream data flows, not direct malicious behavior in this file.

Confidence: 83%Severity: 63%

Audit Metadata

Analyzed At

Aug 4, 2026, 03:55 PM

Package URL

pkg:socket/skills-sh/sachacoldiq%2Fcoldiq-s-gtm-skills%2Fdesign-studio%2F@a8a65af8b473fbd983edbbc1906efe6863c971901f35d031737f22915bcb8eca