sketch

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the functional scope fits a sketching skill, but its main dependency is an unverifiable local MCP server with undisclosed WebSocket endpoint details. No direct credential harvesting or malicious execution is shown, yet the unresolved provenance of the required server makes the skill high-risk to trust.

Confidence: 84%Severity: 78%
Audit Metadata
Analyzed At
Aug 18, 2026, 11:23 PM
Package URL
pkg:socket/skills-sh/glebis%2Fclaude-skills%2Fsketch%2F@ba549cc8a0e46c58dcdcf78c729eefa97974fe0f83e2a5c99778b6a63da0a932
Security Audit — socket — sketch