ui-convert-coordinator

Warn

Audited by Socket on Apr 10, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the coordinator’s orchestration behavior is broadly consistent with a UI-to-design conversion entrypoint, and it does not itself fetch code, read credential files, or exfiltrate data. Risk comes from its broad control plane role: it processes untrusted project content, delegates to many unseen subskills, and can drive MCP-backed remote writes. The skill is coherent with its stated purpose, but its effective footprint is wider than a simple local helper and depends heavily on the safety of the referenced writers, MCP servers, and sibling skills.

Confidence: 80%Severity: 52%
Audit Metadata
Analyzed At
Apr 10, 2026, 02:27 PM
Package URL
pkg:socket/skills-sh/guercheLE%2Fmy-skills%2Fui-convert-coordinator%2F@ea3ef1eebe75bad388af3643572680c181e65018