copywriting-skill

Warn

Audited by Socket on Nov 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stub’s stated purpose is coherent, and it uses the official skills CLI workflow, but its main function is to install another skill from a personal GitHub repo. That transitive trust is disproportionate for a simple pointer skill and raises medium risk even without direct credential access or exfiltration.

Confidence: 91%Severity: 58%
Audit Metadata
Analyzed At
Nov 2, 2026, 07:19 PM
Package URL
pkg:socket/skills-sh/podo%2Fdesign-agent-skills%2Fcopywriting-skill%2F@4529cb0e3cdee86e0ec7fd9c975c300d88343f2cb55b7ddfe9a23075f4d76a8a