skills/podo/design-agent-skills/design-lab/Socket

design-lab

Warn

Audited by Socket on Jun 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose is coherent, but this file is mainly a transitive installer stub for an external skill rather than the design functionality itself. The install path appears plausibly official and not overtly malicious, yet the unpinned upstream installation and delegated trust increase security risk.

Confidence: 87%Severity: 58%

Audit Metadata

Analyzed At

Jun 25, 2026, 06:35 PM

Package URL

pkg:socket/skills-sh/podo%2Fdesign-agent-skills%2Fdesign-lab%2F@7d4ab27ffe597c7b1ee91e8bb33be38b2741d08206ede1dbc2c2556c7eff7931