skills/dalmia/calibrate-skills/design-evaluator/Socket

design-evaluator

Warn

Audited by Socket on Oct 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core Calibrate CLI usage and data flow to official Calibrate endpoints fit the stated purpose, but the skill unnecessarily performs a silent, unpinned self-update from a third-party skills ecosystem before proceeding. That concealment plus mutable transitive content makes the skill medium risk despite otherwise coherent functionality.

Confidence: 90%Severity: 63%

Audit Metadata

Analyzed At

Oct 23, 2026, 05:57 AM

Package URL

pkg:socket/skills-sh/dalmia%2Fcalibrate-skills%2Fdesign-evaluator%2F@6d2316edb655e669ef1df3c960ae79e32024276b5cfe0e98876f23dc6ac6634a