ui-convert-coordinator
Warn
Audited by Socket on Apr 10, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the coordinator’s orchestration behavior is broadly consistent with a UI-to-design conversion entrypoint, and it does not itself fetch code, read credential files, or exfiltrate data. Risk comes from its broad control plane role: it processes untrusted project content, delegates to many unseen subskills, and can drive MCP-backed remote writes. The skill is coherent with its stated purpose, but its effective footprint is wider than a simple local helper and depends heavily on the safety of the referenced writers, MCP servers, and sibling skills.
Confidence: 80%Severity: 52%
Audit Metadata