skills/podo/design-agent-skills/p5js-hermes/Socket

p5js-hermes

Warn

Audited by Socket on Jun 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stub’s stated purpose is coherent, but its main function is to install another skill through a legitimate third-party CLI, creating a transitive trust chain and moderate supply-chain risk. No credential harvesting, hidden exfiltration, or clearly malicious behavior is present.

Confidence: 89%Severity: 62%

Audit Metadata

Analyzed At

Jun 25, 2026, 06:35 PM

Package URL

pkg:socket/skills-sh/podo%2Fdesign-agent-skills%2Fp5js-hermes%2F@6f323219bc31c5315707c4d871d63f4f531a7a15e15e8f9bb5e16d9b93069577