design-systems

Warn

Audited by Socket on Mar 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

The skill is mostly a benign documentation-style guide for frontend design systems, using expected npm-based tooling. However, it becomes suspicious due to the built-in companion-skill discovery and transitive installation instruction, plus local enumeration of agent skill directories that are not required for design-system assistance. Overall classification: SUSPICIOUS, driven by transitive trust expansion rather than direct malware or exfiltration.

Confidence: 91%Severity: 58%
Audit Metadata
Analyzed At
Mar 23, 2026, 01:04 PM
Package URL
pkg:socket/skills-sh/AbsolutelySkilled%2FAbsolutelySkilled%2Fdesign-systems%2F@5c527766757492050e5fe6ab77f08c2795aa21ab
Security Audit — socket — design-systems