skills/nexu-io/motion-anything/web-to-design-md/Socket

web-to-design-md

Warn

Audited by Socket on Jul 18, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose is coherent, but the wrapper’s core behavior is to install and trust a third-party GitHub skill at runtime. The main issue is supply-chain and transitive-skill risk, not confirmed malicious behavior.

Confidence: 89%Severity: 81%

Audit Metadata

Analyzed At

Jul 18, 2026, 08:44 AM

Package URL

pkg:socket/skills-sh/nexu-io%2Fmotion-anything%2Fweb-to-design-md%2F@179bd004fc1038132b254104085aa9c6b59b8c9f175e2400ac226961bb5ef50f