skills/luizhcrocha/skills/to-prd/Socket

to-prd

Warn

Audited by Socket on Jun 18, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core PRD-writing and issue-publication behavior is coherent, but the required `/setup-luizrocha-skills` dependency is an unverified transitive trust hop replacing a known upstream same-org setup command. That makes endpoint, credential, and tracker-routing trust unclear even though the visible skill text is otherwise proportionate to its purpose.

Confidence: 84%Severity: 69%

Audit Metadata

Analyzed At

Jun 18, 2026, 03:35 PM

Package URL

pkg:socket/skills-sh/luizhcrocha%2Fskills%2Fto-prd%2F@36150a387d5e4d70fbfe030cc5097068ac4b225c6c2b5234239767d908c50314