skills/magentosh/skills/logo-design-guide/Socket

logo-design-guide

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose is benign, but the skill’s actual footprint depends on installing a separate unverified skill/CLI path with a publisher mismatch, then logging in and forwarding user data through that tool. The remote image-generation flow itself is plausible, but the transitive install and credential trust are not proportionate to a simple logo-design guide.

Confidence: 87%Severity: 82%

Audit Metadata

Analyzed At

Jul 23, 2026, 06:06 PM

Package URL

pkg:socket/skills-sh/magentosh%2Fskills%2Flogo-design-guide%2F@f71a49867eafc517baefbf85d8361f9b4515dbc02c7cab89f1c36c676a3b3a99