skills/opencoredev/excalidraw-cli/excalidraw/Socket

excalidraw

Warn

Audited by Socket on Oct 10, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s core behavior mostly matches diagram control, but the install path is inconsistent with the official Excalidraw publisher and relies on a third-party GitHub CLI plus companion-skill loading. Data flows are mostly local except optional scene upload to excalidraw.com; main concern is supply-chain and expanded trust, not confirmed malware.

Confidence: 89%Severity: 72%

Audit Metadata

Analyzed At

Oct 10, 2026, 01:00 AM

Package URL

pkg:socket/skills-sh/opencoredev%2Fexcalidraw-cli%2Fexcalidraw%2F@e2e69efcafd1ef950f12bbb2ce95863be77102ec3417391f782648ec69d0ab42