skills/podo/design-agent-skills/ink-google/Socket

ink-google

Warn

Audited by Socket on Jun 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose is coherent, but this file is mostly a pointer that installs a remote upstream skill through a third-party CLI. The main risk is transitive trust and unpinned remote skill installation, not confirmed malicious behavior.

Confidence: 90%Severity: 58%

Audit Metadata

Analyzed At

Jun 25, 2026, 06:35 PM

Package URL

pkg:socket/skills-sh/podo%2Fdesign-agent-skills%2Fink-google%2F@75dd224756b5cfeeda95e3389c5f6c6bfe27fafcfc5bde4765a6d2fedf06ae5b