skills/podo/design-agent-skills/animate-css-skill/Socket

animate-css-skill

Warn

Audited by Socket on Oct 22, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stub is mostly a transitive installer. Its behavior is consistent with its stated purpose, but the main footprint is delegating trust to an unpinned third-party GitHub skill via the official `skills` CLI, which is a meaningful but not overtly malicious supply-chain risk.

Confidence: 90%Severity: 62%

Audit Metadata

Analyzed At

Oct 22, 2026, 01:42 PM

Package URL

pkg:socket/skills-sh/podo%2Fdesign-agent-skills%2Fanimate-css-skill%2F@450cc55ad78c6bdc3d5886206076d3376bce16920d65b59fbca612a9208a587c