character-design

Warn

Audited by Socket on Sep 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s stated character-design purpose is coherent, but it depends on an unverified `vg generate` CLI and routes generation through third-party hosted endpoints, including intermediary access for some vendor-branded models. No clear credential theft or overtly malicious behavior is shown, but the execution trust and data-routing transparency are insufficient for a benign classification.

Confidence: 82%Severity: 72%
Audit Metadata
Analyzed At
Sep 28, 2026, 12:18 PM
Package URL
pkg:socket/skills-sh/kyh%2Fvibedgames-plugins%2Fcharacter-design%2F@244353ad6b4d7fdb6b22a97d1999d384efb174f41629c1a2c1a65a3aaed72e7d