vectorcraft-use

Warn

Audited by Socket on Oct 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

该技能目的与能力总体一致:围绕 VectorCraft 原生创作、导出和返工展开,没有明显的凭据窃取或无关数据外传指令。主要风险来自转移信任与安装执行链:它依赖 vectorcraft-harness 和多个附加技能,并会下载/执行固定 CLI/桌面运行时;在当前材料里,这些外部组件的发布来源与不可变验证细节未被独立证实,因此更适合判为可疑而非恶意。

Confidence: 88%Severity: 58%
Audit Metadata
Analyzed At
Oct 13, 2026, 01:34 PM
Package URL
pkg:socket/skills-sh/full-aigc-skills%2Fvectorcraft-skills%2Fvectorcraft-use%2F@43178986f6459dc7d6645ff44d62842a3ceb162f29f1ff3fcbebdb486dcccc0a