skills/pedroromeroluna/ai-first-product-skills/visual-designer/Socket

visual-designer

Warn

Audited by Socket on Aug 29, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The core behavior is benign and well-scoped for a visual-spec writing skill, with no credential requests, exfiltration, or hidden execution. However, it includes transitive skill installation instructions pointing to an unverified third-party GitHub repo, which creates a meaningful supply-chain trust issue disproportionate to a document-authoring skill.

Confidence: 90%Severity: 74%

Audit Metadata

Analyzed At

Aug 29, 2026, 05:23 AM

Package URL

pkg:socket/skills-sh/pedroromeroluna%2Fai-first-product-skills%2Fvisual-designer%2F@4a8c4e2a079d6886fcce090c024499e731721ea55e243b4b30e00ecce5e77209