lov-xbti-creator

Warn

Audited by Socket on Oct 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose is plausible, but the actual footprint is broader than necessary and includes silent system changes, transitive skill installation, credentialed third-party API use, and an unverifiable template source. The strongest issue is install/execution trust: an unverified clone source plus installing/executing another skill by ambiguous name is disproportionate for a content-generation website scaffold.

Confidence: 91%Severity: 88%
Audit Metadata
Analyzed At
Oct 18, 2026, 04:31 PM
Package URL
pkg:socket/skills-sh/lovstudio%2Fskills%2Flov-xbti-creator%2F@906e4defab7c241258f388fb47ea951ac91b0e255d59f259dce0125a46679c18