skills/mielsense/coss-sv/coss-svelte/Socket

coss-svelte

Warn

Audited by Socket on Sep 1, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's purpose and capabilities mostly align, but it relies on an unofficial vercel-hosted registry and remote docs to drive local code installation and edits. This is not confirmed malware, yet the mutable third-party registry/install path and remote-content-to-code workflow create meaningful supply-chain and prompt-injection risk.

Confidence: 86%Severity: 64%

Audit Metadata

Analyzed At

Sep 1, 2026, 01:26 PM

Package URL

pkg:socket/skills-sh/mielsense%2Fcoss-sv%2Fcoss-svelte%2F@fd20b2e21a9a6713d4b0f1db2a579088a2779e3ddf1e79fad1bc6e776cb97101