skills/onmax/skills/ui/Socket

ui

Warn

Audited by Socket on Aug 14, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's UI-routing purpose is coherent, but it expands trust to external registries and unpinned npm-executed skill content. Main concerns are transitive trust and supply-chain exposure, not confirmed malicious behavior or credential theft.

Confidence: 84%Severity: 57%

Audit Metadata

Analyzed At

Aug 14, 2026, 11:42 PM

Package URL

pkg:socket/skills-sh/onmax%2Fskills%2Fui%2F@ae54f71badeaec74643848e0e8ace84152889bff2f0c86129df22bf07015411e