skills/podo/design-agent-skills/tui-design-skill/Socket

tui-design-skill

Warn

Audited by Socket on Jun 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose is coherent, but this is mainly a transitive installer stub that fetches another skill from an unpinned personal GitHub repo. No direct credential theft or exfiltration is evident, yet the delegated install path creates meaningful supply-chain and inherited-permission risk.

Confidence: 88%Severity: 58%

Audit Metadata

Analyzed At

Jun 25, 2026, 06:36 PM

Package URL

pkg:socket/skills-sh/podo%2Fdesign-agent-skills%2Ftui-design-skill%2F@b607a02bac71254781938eeb27651eaad0b6cd276a8a95b011a47b83c88e818c