skills/danielrosehill/claude-get-toony-plugin/toon-reference/Socket

toon-reference

Warn

Audited by Socket on Jun 16, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's purpose is a benign TOON reference, but its install guidance has a trust inconsistency. It asks users to execute an npm package whose name does not appear to match the official CLI indicated by the publisher evidence, so the main risk is supply-chain confusion rather than confirmed malicious behavior.

Confidence: 100%Severity: 60%

Audit Metadata

Analyzed At

Jun 16, 2026, 07:18 PM

Package URL

pkg:socket/skills-sh/danielrosehill%2FClaude-Get-Toony-Plugin%2Ftoon-reference%2F@98bd9c6bca9eeba02611730ebe8796037d295ac39fb00c5296a7e8dff8d0c016