skills/podo/design-agent-skills/markdown-viewer-skills/Socket

markdown-viewer-skills

Warn

Audited by Socket on Jun 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill is not overtly malicious and its install command aligns with the publisher's documented flow, but its primary function is transitive installation of downstream skills through a third-party CLI and unpinned GitHub repo state. Risk is mainly supply-chain and inherited-trust exposure, not credential theft or exfiltration.

Confidence: 88%Severity: 52%

Audit Metadata

Analyzed At

Jun 25, 2026, 06:35 PM

Package URL

pkg:socket/skills-sh/podo%2Fdesign-agent-skills%2Fmarkdown-viewer-skills%2F@dafe68fc764efd6dd6018968a7caa535dcece7bc3e3059cebdd6f872eb952b86