website-builder

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core purpose is coherent, but the skill gives an agent high-autonomy authority to research untrusted public content, generate code, execute local build steps, and publicly deploy using a Vercel token. The credential scope is proportionate, yet the indirect prompt-injection and autonomous deployment risks make the skill higher risk than a normal framework/deployment helper.

Confidence: 85%Severity: 68%
Audit Metadata
Analyzed At
Jul 20, 2026, 11:30 PM
Package URL
pkg:socket/skills-sh/modbender%2Fskill-library-mcp%2Fwebsite-builder%2F@c0226003bf0bbd5647f4c8517290672bf54e0b56c8824856b634c1274bb24a2f