design-consultation
Warn
Audited by Socket on Jun 25, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is a pointer whose primary purpose is to install another skill, creating transitive trust and remote-content execution risk. The install source is relatively legitimate and same-owner aligned, so this is not confirmed malicious, but the unpinned upstream fetch and extra executable repo components make it a medium-risk skill loader rather than a simple design consultation guide.
Confidence: 89%Severity: 61%
Audit Metadata