pitch-deck-visuals

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s core purpose is coherent, but it expands trust to a separate CLI skill and remote managed apps, with credentialed use of an external CLI and transitive skill installation. The main concerns are supply-chain/install trust and broad delegated execution, not confirmed malware or clear credential theft.

Confidence: 85%Severity: 56%
Audit Metadata
Analyzed At
Jul 23, 2026, 06:06 PM
Package URL
pkg:socket/skills-sh/magentosh%2Fskills%2Fpitch-deck-visuals%2F@01e433b3182c27a17f588bbc2f10de8df987aaa27ad0a1faa1c86aceafeecd1c
Security Audit — socket — pitch-deck-visuals