pitch-deck-visuals

Warn

Audited by Socket on May 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s purpose is benign, but its actual footprint relies on external CLI installation, hosted rendering services, and transitive skill installs. The main issue is provenance inconsistency (`inference-sh` vs `belt-sh`) plus broad execution scope, not confirmed malware.

Confidence: 85%Severity: 72%
Audit Metadata
Analyzed At
May 17, 2026, 08:04 PM
Package URL
pkg:socket/skills-sh/inference-skills%2Fskills%2Fpitch-deck-visuals%2F@45694cc122d8ea91e32891c17e6a8492c49c7e11
Security Audit — socket — pitch-deck-visuals