deck-craft

Warn

Audited by Socket on Jul 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: 核心能力与“高质量 PPT 制作”总体一致,未见明显凭据窃取或外部数据中转;但该技能包含按需安装第三方技能 `Humanizer-zh` 的指令,带来明显的传递信任风险。若不执行该第三方技能安装,整体更接近中低风险的本地内容生产技能;执行该安装后,风险升至中高。

Confidence: 84%Severity: 64%
Audit Metadata
Analyzed At
Jul 22, 2026, 03:03 PM
Package URL
pkg:socket/skills-sh/O0000-code%2Fpaper-deck-reveal%2Fdeck-craft%2F@49e0f29cade0b4cb2577d430b64fcb5b8fab3d65efa2ffbfcad52e41f177a395
Security Audit — socket — deck-craft