skills/huangrx6/agent-skills/visual-ui-layout-spec/Socket

visual-ui-layout-spec

Warn

Audited by Socket on Aug 27, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core purpose is coherent, and the uv installer is an official same-org bootstrap with moderate supply-chain risk only. The main concern is that screenshots and VISUAL_API_KEY are routed to an arbitrary user-configured remote VLM endpoint, so the skill’s privacy and credential trust boundary is external and unverifiable from the skill itself.

Confidence: 89%Severity: 61%

Audit Metadata

Analyzed At

Aug 27, 2026, 10:42 AM

Package URL

pkg:socket/skills-sh/huangrx6%2Fagent-skills%2Fvisual-ui-layout-spec%2F@c6a8a2b2ba743d52687749d6b65382740b62c073c7b2cc77f004ff0686a7958d