wondelai-skills

Warn

Audited by Socket on Jun 25, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is mostly a catalog stub that directs installation of additional remote skills through an official CLI. The install source appears legitimate and documented, and there is no credential harvesting or hidden exfiltration, but the transitive skill installation meaningfully increases trust and execution risk beyond a simple design-reference skill.

Confidence: 91%Severity: 58%
Audit Metadata
Analyzed At
Jun 25, 2026, 06:35 PM
Package URL
pkg:socket/skills-sh/podo%2Fdesign-agent-skills%2Fwondelai-skills%2F@748b316e95162629964d45c9bb3318c262c563bab5b7fe3b9052f9f0be39cdcb
Security Audit — socket — wondelai-skills