framer-code-components-overrides

Warn

Audited by Socket on Oct 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the Framer guidance itself is coherent, but the skill's footprint goes beyond documentation by allowing runtime replacement from remote GitHub content, self-updating installed skill files, and optional upstream PR contribution. Those behaviors are related to maintenance, yet they expand trust and execution scope enough to warrant medium risk rather than benign.

Confidence: 91%Severity: 58%
Audit Metadata
Analyzed At
Oct 17, 2026, 09:17 AM
Package URL
pkg:socket/skills-sh/fredm00n%2Fframerlabs%2Fframer-code-components-overrides%2F@a031767daf50af501d5c64b7cfbe7ad9f6f0e3889cbd1de9aad9b6783bba0d59