30-thiet-ke-master
Warn
Audited by Socket on Aug 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core design/prompt-generation behavior is mostly aligned with the stated purpose, and its file access is proportionate. The main concern is data-flow and trust: enterprise mode routes content through Open Design infrastructure instead of official provider APIs, and the provenance evidence for that toolchain is only partially strong. This is not confirmed malware, but it is a medium-risk skill due to third-party execution/data routing and unclear model/API consistency.
Confidence: 80%Severity: 52%
Audit Metadata