skills/jdmorag97-rgb/ddc_skills_for_ai_agents_in_construction/dwg-to-excel/Socket

dwg-to-excel

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

BENIGN in purpose and data flow, but HIGH supply-chain risk because the skill depends on a proprietary unverifiable executable. Capabilities are proportionate to DWG conversion, and no credential theft or exfiltration is shown, yet the black-box binary requirement makes this suspicious from an installation-trust standpoint.

Confidence: 88%Severity: 78%

Audit Metadata

Analyzed At

Sep 17, 2026, 08:08 AM

Package URL

pkg:socket/skills-sh/jdmorag97-rgb%2Fddc_skills_for_ai_agents_in_construction%2Fdwg-to-excel%2F@306a306d0f85fc22ea4f0872ce55fdbede00dd8a98b1821566ed1de1bc41bb38