skills/hosseinmirzapur/opencode-skills/hand-drawn-diagrams/Socket

hand-drawn-diagrams

Warn

Audited by Socket on Aug 26, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The local skill entry is minimal and aligned with a diagram-generation purpose, but it primarily acts as a pointer to install an upstream third-party skill from a personal GitHub repo. No direct credential access or exfiltration is shown here, yet the transitive installation instruction and weak provenance make the overall trust posture medium risk.

Confidence: 89%Severity: 56%

Audit Metadata

Analyzed At

Aug 26, 2026, 05:57 PM

Package URL

pkg:socket/skills-sh/hosseinmirzapur%2Fopencode-skills%2Fhand-drawn-diagrams%2F@feefd867e54ba78f39753af960ec41b3c0b67123ba866d6b3bf6e9caa108f4c8