lazyweb-design-improve

Warn

Audited by Socket on Sep 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is mostly aligned with its stated design-review purpose, and its data flows largely go to official Lazyweb infrastructure or local output files. The main concerns are moderate supply-chain trust from one-line installer guidance and reliance on external browse/helper binaries, plus broad web-content ingestion with command execution capability; these raise security risk but do not show clear malicious intent or disproportionate credential harvesting.

Confidence: 85%Severity: 52%
Audit Metadata
Analyzed At
Sep 13, 2026, 10:14 PM
Package URL
pkg:socket/skills-sh/gabelul%2Flazyweb-skill%2Flazyweb-design-improve%2F@680963652a72a7f0bab3609613c8bc5b634638d8ca10811bd25ec72d27cc70a2