skills/podo/design-agent-skills/material-3-skill/Socket

material-3-skill

Warn

Audited by Socket on Jun 13, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose is coherent, but this stub’s main function is to fetch and install another skill from a mutable GitHub URL on a personal account. No clear credential harvesting or malicious data flow is present, yet the transitive trust and unpinned remote skill download make it medium risk.

Confidence: 100%Severity: 60%

Audit Metadata

Analyzed At

Jun 13, 2026, 08:10 AM

Package URL

pkg:socket/skills-sh/podo%2Fdesign-agent-skills%2Fmaterial-3-skill%2F@c0ab58807795ff8c048b16604846955ccb08ce5ac621c73931cd3056a2501082