plan-design-review

Warn

Audited by Socket on Oct 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's high-level purpose and most capabilities are coherent for a design-plan review workflow, but its footprint is unusually large and depends on many unreviewed local executables, shell-evaluated helper output, logging/telemetry, and optional external CLI review. The main concern is execution trust and opaque data handling inside same-skill binaries, not clear credential theft or confirmed malware.

Confidence: 83%Severity: 78%
Audit Metadata
Analyzed At
Oct 1, 2026, 07:29 PM
Package URL
pkg:socket/skills-sh/garrytan%2Fgstack%2Fplan-design-review%2F@c26bd55108eb6ce8ba78fe8de55f4bc26a258ecd832d4c555a2dc8999942567a
Security Audit — socket — plan-design-review