lazyweb-design-improve
Warn
Audited by Socket on Sep 13, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is mostly aligned with its stated design-review purpose, and its data flows largely go to official Lazyweb infrastructure or local output files. The main concerns are moderate supply-chain trust from one-line installer guidance and reliance on external browse/helper binaries, plus broad web-content ingestion with command execution capability; these raise security risk but do not show clear malicious intent or disproportionate credential harvesting.
Confidence: 85%Severity: 52%
Audit Metadata