skills/kvksatish/open-design/creative-director/Socket

creative-director

Warn

Audited by Socket on Jun 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The stated purpose is benign and the visible entry does not request credentials or perform exfiltration, but it primarily acts as a pointer to install a separate upstream skill from a personal GitHub repository. The main risk is transitive trust and unpinned supply-chain exposure, not confirmed malicious behavior.

Confidence: 88%Severity: 57%

Audit Metadata

Analyzed At

Jun 28, 2026, 07:23 PM

Package URL

pkg:socket/skills-sh/kvksatish%2Fopen-design%2Fcreative-director%2F@d063749ca76975d3623f85cada42bb4af6a024f00910a81d5715f79403dd4407