skills/kevinaimonster/skill-hub/prd-writer/Socket

prd-writer

Warn

Audited by Socket on Oct 16, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core PRD-writing behavior is benign and well-scoped, but the embedded recommendation to install an unverified third-party GitHub skill is inconsistent with the stated purpose and introduces medium supply-chain/transitive-trust risk.

Confidence: 91%Severity: 56%

Audit Metadata

Analyzed At

Oct 16, 2026, 09:50 PM

Package URL

pkg:socket/skills-sh/kevinaimonster%2Fskill-hub%2Fprd-writer%2F@8b648e899d3ba99898d6a1b068a4e567f1ded69f59d04ab8eae092e6b1ae747d