design-systems
Warn
Audited by Socket on Mar 23, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
The skill is mostly a benign documentation-style guide for frontend design systems, using expected npm-based tooling. However, it becomes suspicious due to the built-in companion-skill discovery and transitive installation instruction, plus local enumeration of agent skill directories that are not required for design-system assistance. Overall classification: SUSPICIOUS, driven by transitive trust expansion rather than direct malware or exfiltration.
Confidence: 91%Severity: 58%
Audit Metadata