plan-design-review

Warn

Audited by Socket on Aug 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated design-review purpose is benign, but this skill is mainly a redirect that instructs installation of an upstream bundle from a personal GitHub repo. No direct malicious behavior appears here, yet the transitive install path and mutable same-repo setup scripts make the skill higher risk than its narrow review purpose suggests.

Confidence: 88%Severity: 68%
Audit Metadata
Analyzed At
Aug 19, 2026, 06:12 AM
Package URL
pkg:socket/skills-sh/nexu-io%2Fopen-design%2Fplan-design-review%2F@d03de6eb6f1437d0f4b8a1f8edf9e799f22b33e33b5c5303a878827e533ceeff
Security Audit — socket — plan-design-review