d3-visualization

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is benign, but the skill primarily redirects users to install a separate upstream skill from an unpinned personal GitHub repo. That transitive trust chain and mutable clone-based install are disproportionate for a D3 teaching/catalog skill, though there is no direct evidence of credential theft or overtly malicious behavior in the provided content.

Confidence: 91%Severity: 74%
Audit Metadata
Analyzed At
Sep 14, 2026, 08:22 PM
Package URL
pkg:socket/skills-sh/nexu-io%2Fopen-design%2Fd3-visualization%2F@a56f1113fc33397ec99aef1ba7f3aef48142e449adff287d6e5751fe04e28acd
Security Audit — socket — d3-visualization