skills/podo/design-agent-skills/copywriting-skill/Socket

copywriting-skill

Warn

Audited by Socket on Jun 13, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stub is broadly consistent with a copywriting installer, but its primary function is transitive installation of a remote skill from a personal GitHub repo via a third-party CLI. No direct credential theft or exfiltration appears in this stub, yet the install chain and delegated trust make it medium risk.

Confidence: 100%Severity: 60%

Audit Metadata

Analyzed At

Jun 13, 2026, 10:45 AM

Package URL

pkg:socket/skills-sh/podo%2Fdesign-agent-skills%2Fcopywriting-skill%2F@406bebc69cba69f90d84fbbab6d6cb22c149f2393fa0b1d95e611c45146af175