lovstudio-event-poster

Warn

Audited by Socket on Jul 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated poster-design purpose does not match the visible implementation, which is mainly an encrypted loader that executes hidden instructions obtained through external tooling and network validation. The opaque instruction set, transient third-party CLI execution, and transitive skill installation make the skill high-risk even without proof of overt malware.

Confidence: 87%Severity: 78%
Audit Metadata
Analyzed At
Jul 29, 2026, 02:55 PM
Package URL
pkg:socket/skills-sh/lovstudio%2Fgeneral-skills%2Flovstudio-event-poster%2F@5ea185766945e1f6e84245fc597fce01fb2500f504a7fed50ea9e4a3a56745f1
Security Audit — socket — lovstudio-event-poster