artcraft-cli

Warn

Audited by Socket on Oct 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: 目的与能力总体相关,主要是 ArtCraft 工作流/CLI 编排文档;未见直接窃密、隐藏外传或恶意预执行命令。但该技能的真实执行高度依赖另一个技能及多个可递归安装的兄弟技能,形成显著 transitive trust 风险;且 full-aigc-skills 与上游 storytold 并非同一发布者,官方关系未验证,安装与执行信任边界偏大。

Confidence: 88%Severity: 72%
Audit Metadata
Analyzed At
Oct 14, 2026, 10:28 PM
Package URL
pkg:socket/skills-sh/full-aigc-skills%2Fartcraft-skills%2Fartcraft-cli%2F@5936126954157f78afd5462929dd90eedbb06ed710e42ae5dd22e3c75b25810b