skills/podo/design-agent-skills/designer-skills/Socket

designer-skills

Warn

Audited by Socket on Jun 13, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stub is internally coherent as a marketplace pointer, but its primary function is transitive installation of a very large third-party skill bundle from a personal GitHub repo. No direct exfiltration or credential harvesting is visible in the stub, yet the unseen downstream package materially increases supply-chain and permission risk.

Confidence: 100%Severity: 60%

Audit Metadata

Analyzed At

Jun 13, 2026, 10:45 AM

Package URL

pkg:socket/skills-sh/podo%2Fdesign-agent-skills%2Fdesigner-skills%2F@5b0cf012a090db8f9abd1a7755b3fcfc7d913af09e82a671ba7375791c56078a