content-strategy

Warn

Audited by Socket on Oct 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The stub’s purpose and capabilities mostly align, but its main function is to cause transitive installation of a remote skill. Provenance is better than a random downloader because it uses the official Skills CLI/plugin flow and a matching public repo, yet the unpinned remote install and inherited-permissions model make this medium risk rather than benign.

Confidence: 88%Severity: 56%
Audit Metadata
Analyzed At
Oct 24, 2026, 06:19 AM
Package URL
pkg:socket/skills-sh/podo%2Fdesign-agent-skills%2Fcontent-strategy%2F@fae91b9173b7d38ad2c2e3c6cd5bcb909be85deacb792e60a04993d1fc373060