skills/lingxling/awesome-skills-cn/canvas-automation/Socket

canvas-automation

Warn

Audited by Socket on Jun 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s Canvas automation purpose is plausible, but its actual trust path is inconsistent with current official documentation. It routes actions through a discontinued third-party-hosted MCP surface with outdated tool names and optional remote sandbox execution, creating medium risk despite no direct evidence of credential theft or malware.

Confidence: 86%Severity: 58%

Audit Metadata

Analyzed At

Jun 25, 2026, 04:02 PM

Package URL

pkg:socket/skills-sh/lingxling%2Fawesome-skills-cn%2Fcanvas-automation%2F@1fd31e0be3cd3248c126bdd159308f5cee1bc4a521f80648a30639f223025178