skills/podo/design-agent-skills/make-interfaces-better/Socket

make-interfaces-better

Warn

Audited by Socket on Jun 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stub is internally consistent as a catalog pointer for a UI-polish skill, but its core behavior is transitive installation of an unreviewed third-party skill from a personal GitHub repo via an unpinned npx flow. No direct malware or exfiltration is present in the stub itself, but the trust chain and remote skill installation make it medium risk.

Confidence: 89%Severity: 64%

Audit Metadata

Analyzed At

Jun 25, 2026, 06:35 PM

Package URL

pkg:socket/skills-sh/podo%2Fdesign-agent-skills%2Fmake-interfaces-better%2F@4994150e26b7d9dc742787bdd4ba7850b8d47f20da5fa2a93ac38b62daba5d7b