screenshot

Warn

Audited by Socket on Sep 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The advertised capability is coherent with a screenshot skill and there is no evidence of credential theft or exfiltration, but the entry is only a launcher that instructs transitive installation of upstream skills from mutable GitHub content. Same-org provenance lowers concern, yet the indirect install path and unpinned upstream bundle make this higher risk than a self-contained benign documentation skill.

Confidence: 88%Severity: 56%
Audit Metadata
Analyzed At
Sep 24, 2026, 06:01 AM
Package URL
pkg:socket/skills-sh/kejidaren%2Fopen-design-codex%2Fscreenshot%2F@95b027d2f885d1625e3b6d0d065e1e81e7585e911ecf88d2215fd634a7296d14