skills/podo/design-agent-skills/ui-craft/Socket

ui-craft

Warn

Audited by Socket on Oct 21, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s UI-design purpose is coherent, and there is no direct exfiltration or malicious pre-execution behavior, but the stub mainly exists to install other skills from a personal GitHub repo and optionally a bundled MCP server via npm. That transitive trust and extra install footprint are disproportionate enough to warrant caution.

Confidence: 88%Severity: 58%

Audit Metadata

Analyzed At

Oct 21, 2026, 02:17 PM

Package URL

pkg:socket/skills-sh/podo%2Fdesign-agent-skills%2Fui-craft%2F@5222cbad0b333d4ca4f51b5b0d832505c0b76509588c5552f155f0c769f2bcf1