skills/jmsktm/claude-settings/Lean Canvas Builder/Socket

Lean Canvas Builder

Warn

Audited by Socket on Oct 21, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill content is simple and benign business-planning guidance, with no credential or exfiltration behavior. Risk comes from the discoverable installation path: a transitive GitHub-based skill install tied to a third-party repo not clearly owned by the stated publisher, with no pinning or release verification.

Confidence: 91%Severity: 56%

Audit Metadata

Analyzed At

Oct 21, 2026, 02:50 AM

Package URL

pkg:socket/skills-sh/jmsktm%2Fclaude-settings%2Flean-canvas-builder%2F@e0d9fd73cf0e51a140d08dbca9acb0823d9e2a53844d8809de1185f25ba900cc