website-builder
Warn
Audited by Socket on Jul 20, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core purpose is coherent, but the skill gives an agent high-autonomy authority to research untrusted public content, generate code, execute local build steps, and publicly deploy using a Vercel token. The credential scope is proportionate, yet the indirect prompt-injection and autonomous deployment risks make the skill higher risk than a normal framework/deployment helper.
Confidence: 85%Severity: 68%
Audit Metadata