frontend-design
Warn
Audited by Socket on Jun 25, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s stated design purpose is coherent, but this stub primarily serves as a transitive installer for a third-party GitHub skill. The installer path uses an official open-source CLI and does not show credential harvesting or malicious payload execution, but the trust chain and mutable personal-repo upstream make it medium risk.
Confidence: 87%Severity: 66%
Audit Metadata