skills/malinskibeniamin/skills/excalidraw-diagram/Socket

excalidraw-diagram

Warn

Audited by Socket on Sep 11, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s purpose and file access are coherent for diagram generation, and data stays local except for an optional user-requested share flow. The main concern is supply-chain trust: it executes a third-party Excalidraw CLI fetched at runtime via bunx rather than the official Excalidraw org distribution path.

Confidence: 85%Severity: 56%

Audit Metadata

Analyzed At

Sep 11, 2026, 02:02 AM

Package URL

pkg:socket/skills-sh/malinskibeniamin%2Fskills%2Fexcalidraw-diagram%2F@f359b5f047e42afc63dcd28b9e7ad1bfdddaf3838811fdd9a05dd2d2077eb826