moda-library

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Purpose and capabilities are coherent for a workspace/drive skill, and network destinations appear first-party Moda infrastructure. The main risk is install/execution trust: the skill depends on a same-org but not fully source-verifiable `moda` CLI that likely handles authenticated workspace access, which triggers a high security-risk classification even without clear malicious behavior.

Confidence: 84%Severity: 82%
Audit Metadata
Analyzed At
Oct 9, 2026, 04:45 PM
Package URL
pkg:socket/skills-sh/moda-design%2Fmoda%2Fmoda-library%2F@5b7c252c9e915efcaea1c895d18a5158a68b2fdb8a9148eb68b4a524b247f589