excalidraw-diagram

Warn

Audited by Socket on Jun 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stub's stated purpose is coherent, but it mainly performs transitive installation of a third-party skill from an unpinned personal GitHub repo. Risk comes from remote skill installation and command execution trust, not from confirmed malicious behavior in the stub itself.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 13, 2026, 08:10 AM
Package URL
pkg:socket/skills-sh/podo%2Fdesign-agent-skills%2Fexcalidraw-diagram%2F@09fa11e171cd666fbb48f9bf91e63ea35947bd789b3395a7f99e458d68c57337
Security Audit — socket — excalidraw-diagram