skills/kenneth-liao/ai-launchpad-marketplace/design-system/Socket

design-system

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the core workflow is coherent for a design-system generator, but it relies on a transitive third-party skill for image generation and likely forwards Gemini/Nano Banana API credentials into that external code. The main concern is supply-chain and credential-forwarding trust, not overt malicious behavior in the visible skill.

Confidence: 85%Severity: 72%

Audit Metadata

Analyzed At

Oct 9, 2026, 05:15 AM

Package URL

pkg:socket/skills-sh/kenneth-liao%2Fai-launchpad-marketplace%2Fdesign-system%2F@b74a84859804d47837c9c4d0c3810331f7b151111c2b11d28b7af646549ba55b