html-to-interaction-prompts

Warn

Audited by Socket on Aug 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is broadly scoped but coherent for content-capture workflows, with low install-trust and credential risk. The main concern is indirect prompt-injection exposure from analyzing arbitrary live webpages while also being allowed to write files and make git commits.

Confidence: 88%Severity: 56%
Audit Metadata
Analyzed At
Aug 30, 2026, 02:54 PM
Package URL
pkg:socket/skills-sh/paperwave%2Fagent-skills-design%2Fhtml-to-interaction-prompts%2F@39135cfd7f9f228d1c5f82a7494958f3da566274e4456fff3756c1b021587499
Security Audit — socket — html-to-interaction-prompts