skills/podo/design-agent-skills/figma-variables-tokens-generator/Socket

figma-variables-tokens-generator

Warn

Audited by Socket on Jun 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose is coherent, but this stub mainly acts as an installer for a third-party skill from a personal GitHub account, creating transitive trust and moderate supply-chain risk. No clear credential harvesting, exfiltration, or malicious behavior is evidenced in the provided text, so this is not confirmed malware.

Confidence: 85%Severity: 63%

Audit Metadata

Analyzed At

Jun 25, 2026, 06:35 PM

Package URL

pkg:socket/skills-sh/podo%2Fdesign-agent-skills%2Ffigma-variables-tokens-generator%2F@c0bc982cc0c3c811a5dbc13742df8f2e3c884d1fbca15d31b4d6e51ccdb5cafd