skills/podo/design-agent-skills/gsap-skills/Socket

gsap-skills

Warn

Audited by Socket on Jun 13, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose is coherent, but this stub primarily functions as a transitive installer for remote skill content via a third-party CLI and an unpinned GitHub source. Same-org GitHub ownership makes it more consistent than a random repo, yet the install path still carries medium supply-chain and trust-chain risk.

Confidence: 100%Severity: 60%

Audit Metadata

Analyzed At

Jun 13, 2026, 08:10 AM

Package URL

pkg:socket/skills-sh/podo%2Fdesign-agent-skills%2Fgsap-skills%2F@b97822c33bbcd140f92175879c77a99ec7a1024ca43d181f835eba064a8a9480