service-blueprint

Warn

Audited by Socket on Oct 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stub is coherent with its stated purpose, but its primary function is to induce transitive installation of a third-party skill from a personal GitHub repo. The install path itself appears legitimate for the skills ecosystem, so this is not confirmed malware, but it carries medium risk because the real behavior lives in unreviewed downstream content that inherits agent permissions.

Confidence: 89%Severity: 61%
Audit Metadata
Analyzed At
Oct 22, 2026, 09:03 AM
Package URL
pkg:socket/skills-sh/podo%2Fdesign-agent-skills%2Fservice-blueprint%2F@70f6ab6a50be61d5d2ba682ab36a432c50f2c6972e4883dd34998a2f58d772ec