skills/podo/design-agent-skills/css-animation-skill/Socket

css-animation-skill

Warn

Audited by Socket on Jun 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The pointer skill's purpose is coherent, but its actual footprint is mainly transitive installation of a third-party skill from a personal GitHub repo through an unpinned CLI path. No direct credential theft or overt exfiltration is shown here, yet the install-trust and delegated-skill risks are disproportionate for a simple catalogue stub.

Confidence: 86%Severity: 62%

Audit Metadata

Analyzed At

Jun 25, 2026, 06:34 PM

Package URL

pkg:socket/skills-sh/podo%2Fdesign-agent-skills%2Fcss-animation-skill%2F@128401bc440e60b8107faf1a9c92b96d5e3a48d976388d46991a70955607fe4d