skills/hosseinmirzapur/opencode-skills/d3-visualization/Socket

d3-visualization

Warn

Audited by Socket on Aug 26, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The stated purpose is benign and D3-focused, but the skill primarily instructs users to install a separate upstream skill from a personal GitHub repo into the active agent's skills directory. The main risk is transitive trust and unpinned supply chain exposure, not confirmed malicious behavior.

Confidence: 87%Severity: 62%

Audit Metadata

Analyzed At

Aug 26, 2026, 05:56 PM

Package URL

pkg:socket/skills-sh/hosseinmirzapur%2Fopencode-skills%2Fd3-visualization%2F@5f976dbacd13aa86d081949146a2ddefae5778e79ce9713c3666cd6bb77345e2