web-design-guidelines
Warn
Audited by Socket on Jun 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core purpose is coherent, but the skill's design relies on mutable remote instructions fetched at runtime and optionally chains into a separate third-party skill. The main risk is remote-content instruction steering rather than credential theft or overt malware.
Confidence: 100%Severity: 60%
Audit Metadata