skills/educlopez/ui-craft/craft/Socket

craft

Warn

Audited by Socket on Aug 6, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill’s core purpose is coherent for UI generation, but it expands trust by loading another skill and depending on unspecified MCP/browser services. No explicit credential theft, remote installer, or exfiltration path is present, yet the transitive skill dependency plus screenshot/MCP-driven write workflow creates medium security risk.

Confidence: 81%Severity: 56%

Audit Metadata

Analyzed At

Aug 6, 2026, 07:39 PM

Package URL

pkg:socket/skills-sh/educlopez%2Fui-craft%2Fcraft%2F@8bcaabdf5d411331ee76a3f26dc2c2f025948bc4d1fd3f6f20cce793cd1f41a9