sketch
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the functional scope fits a sketching skill, but its main dependency is an unverifiable local MCP server with undisclosed WebSocket endpoint details. No direct credential harvesting or malicious execution is shown, yet the unresolved provenance of the required server makes the skill high-risk to trust.
Confidence: 84%Severity: 78%
Audit Metadata