design-review

Warn

Audited by Socket on Nov 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core browse/screenshot/design-audit behavior fits the stated purpose, and the cited external installers appear official. However, the skill is over-scoped: beyond design review it can bootstrap test frameworks, create CI, modify CLAUDE.md, commit many changes, log telemetry, and optionally sync artifacts via gstack-managed channels. This looks more like a broad repo automation skill embedded inside a design-review wrapper than a narrowly scoped visual QA skill.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
Nov 8, 2026, 09:19 AM
Package URL
pkg:socket/skills-sh/ivansamartino%2Fgstack%2Fdesign-review%2F@1c4daf3356ef634e4334a548c10306ed09fb26d2