skills/podo/design-agent-skills/distinctive-frontend/Socket

distinctive-frontend

Warn

Audited by Socket on Jun 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s stated purpose is benign and proportionate, but this artifact is only a stub that installs a separate package. The npm install source is conventional, yet the publisher identity mismatch (Koomook GitHub vs @bong npm) and unpinned global transitive install add medium supply-chain risk.

Confidence: 88%Severity: 52%

Audit Metadata

Analyzed At

Jun 25, 2026, 06:35 PM

Package URL

pkg:socket/skills-sh/podo%2Fdesign-agent-skills%2Fdistinctive-frontend%2F@5e7ca052db6fbfb1b02e1b0c154f5e12344782f447367d665c968b839a2219f3