skills/podo/design-agent-skills/product-position/Socket

product-position

Warn

Audited by Socket on Jun 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The stated purpose is benign and the local checks are proportionate, but this stub's core function is to install another skill via an unpinned CLI, creating a transitive trust chain to external instructions. Risk is mainly supply-chain and transitive-skill installation, not confirmed malware or credential theft.

Confidence: 90%Severity: 58%

Audit Metadata

Analyzed At

Jun 25, 2026, 06:36 PM

Package URL

pkg:socket/skills-sh/podo%2Fdesign-agent-skills%2Fproduct-position%2F@86091f212ebedcec22e403b6277457b700337826b09990b7ae741409be6b9ff9