skills/oil-oil/gemini-designer/grok-designer/Socket

grok-designer

Warn

Audited by Socket on Jul 10, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The stated design-advisor purpose matches the general capability, but the trust chain is not coherent enough: it depends on a nonstandard external CLI and a hidden installer script whose provenance cannot be verified from the skill. The main risk is supply-chain plus external transmission of local files/images to an opaque tool, not confirmed malware.

Confidence: 87%Severity: 80%

Audit Metadata

Analyzed At

Jul 10, 2026, 03:41 AM

Package URL

pkg:socket/skills-sh/oil-oil%2Fgemini-designer%2Fgrok-designer%2F@dc5bb80b959ae522a29969d6c6685174afed5724