skills/podo/design-agent-skills/interaction-design/Socket

interaction-design

Warn

Audited by Socket on Oct 21, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stub is internally consistent as a pointer to an interaction-design skill, but its core behavior is transitive installation of a third-party skill from a personal GitHub repo. No direct credential theft, exfiltration, or malicious pre-execution appears, yet the inherited trust and downstream code/instruction loading create meaningful supply-chain risk.

Confidence: 90%Severity: 68%

Audit Metadata

Analyzed At

Oct 21, 2026, 02:17 PM

Package URL

pkg:socket/skills-sh/podo%2Fdesign-agent-skills%2Finteraction-design%2F@9a4f28871bbf5fb3ed636bf826065c4a375ec97262133bec488807f93c1ff6b9