skills/podo/design-agent-skills/platform-design-skills/Socket

platform-design-skills

Warn

Audited by Socket on Jun 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

This skill is a benign-looking installer stub, but its real footprint is a transitive skill installation flow to an external GitHub-hosted package. The main concern is trust in the downstream skill and mutable upstream content, not direct credential theft or exfiltration in the stub itself.

Confidence: 90%Severity: 62%

Audit Metadata

Analyzed At

Jun 25, 2026, 06:35 PM

Package URL

pkg:socket/skills-sh/podo%2Fdesign-agent-skills%2Fplatform-design-skills%2F@45756d3c0158dca376a69599836f01e1910d03ed288e60a899e2c20c15ca250b