openai-skills

Warn

Audited by Socket on Jun 25, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is coherent, and the OpenAI target repo appears legitimate, but this stub mainly acts as an installer launcher for other skills through an unpinned third-party CLI. The main risk is transitive trust and supply-chain exposure, not confirmed malicious behavior.

Confidence: 88%Severity: 62%
Audit Metadata
Analyzed At
Jun 25, 2026, 06:36 PM
Package URL
pkg:socket/skills-sh/podo%2Fdesign-agent-skills%2Fopenai-skills%2F@ab1d060cc0246d467efe12be34df021425d2838b75cba0d8faf49d87dfe02eec
Security Audit — socket — openai-skills