design-consultation

Warn

Audited by Socket on Jun 25, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is a pointer whose primary purpose is to install another skill, creating transitive trust and remote-content execution risk. The install source is relatively legitimate and same-owner aligned, so this is not confirmed malicious, but the unpinned upstream fetch and extra executable repo components make it a medium-risk skill loader rather than a simple design consultation guide.

Confidence: 89%Severity: 61%
Audit Metadata
Analyzed At
Jun 25, 2026, 06:34 PM
Package URL
pkg:socket/skills-sh/podo%2Fdesign-agent-skills%2Fdesign-consultation%2F@1a965f2fc006a54f4ea7b7481a9436c450ff781379048f85b529aba7ab9dfe18
Security Audit — socket — design-consultation