skills/magentosh/skills/chat-ui/Socket

chat-ui

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The core chat UI examples are benign, but the skill includes an unrelated third-party skill installation (`belt-sh/cli`) and additional transitive skill installs that exceed the narrow purpose of UI component documentation. No direct credential theft is shown, but install trust and scope coherence are weak.

Confidence: 89%Severity: 76%

Audit Metadata

Analyzed At

Jul 23, 2026, 06:05 PM

Package URL

pkg:socket/skills-sh/magentosh%2Fskills%2Fchat-ui%2F@90d29822df35e709e8ff76d6d77fcf30ced2f2dd316d7f5d62e7e77697680849