plan-design-review

Warn

Audited by Socket on Jul 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core design-plan review behavior is plausible, but the skill's actual footprint is much broader: opaque local binaries, telemetry/logging, update checks, review chaining, and persistent state management. The biggest concern is unverifiable gstack executables handling project metadata and outbound telemetry, which is disproportionate for a design-review skill even without clear evidence of credential theft.

Confidence: 82%Severity: 82%
Audit Metadata
Analyzed At
Jul 15, 2026, 12:56 PM
Package URL
pkg:socket/skills-sh/Lua2147%2Fclaude-toolkit-catalog%2Fplan-design-review%2F@73c568565bb6e5e42fbfd865c06a1a93b0495cd041954b4941a47a7c8d92be09
Security Audit — socket — plan-design-review