skills/marcioaltoe/skills/web-design-guidelines/Socket

web-design-guidelines

Warn

Audited by Socket on Aug 26, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The stated purpose is coherent and same-org hosting supports legitimacy, but the skill relies on mutable remote instructions fetched from an unpinned main branch. This is not confirmed malware, yet it creates a medium prompt supply-chain risk because upstream content can silently change the agent’s behavior at review time.

Confidence: 90%Severity: 53%

Audit Metadata

Analyzed At

Aug 26, 2026, 05:22 PM

Package URL

pkg:socket/skills-sh/marcioaltoe%2Fskills%2Fweb-design-guidelines%2F@a75023cc3795e4f4f1a2463e3045eca76b16e093105b3853b25244ab6619b077