webgpu-claude-skill

Warn

Audited by Socket on Jun 25, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated WebGPU knowledge purpose is coherent, but this stub primarily functions as a loader for another remote skill through a third-party CLI and mutable GitHub source. The main risk is transitive installation and supply-chain trust, not malware or credential theft in the provided text.

Confidence: 90%Severity: 58%
Audit Metadata
Analyzed At
Jun 25, 2026, 06:35 PM
Package URL
pkg:socket/skills-sh/podo%2Fdesign-agent-skills%2Fwebgpu-claude-skill%2F@05d090f13a9009885e07115b363d53b096c56e71ff6ad225c7edc01f96d16a3e
Security Audit — socket — webgpu-claude-skill