skills/eva813/skills-base/vue-layout/Socket

vue-layout

Warn

Audited by Socket on Aug 16, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill's behavior mostly matches its stated frontend layout purpose, but it relies on a third-party Framelink MCP that receives the user's Figma token instead of using Figma's official MCP path. This is a medium supply-chain and credential-forwarding risk, not confirmed malware.

Confidence: 89%Severity: 58%

Audit Metadata

Analyzed At

Aug 16, 2026, 12:31 AM

Package URL

pkg:socket/skills-sh/eva813%2Fskills-base%2Fvue-layout%2F@7892cdb0af59a5d2c354b2cd82e4ec63ce36927c347c24c3911b32ffeef51af9