skills/qu-skills/skills/widgets-ui/Socket

widgets-ui

Warn

Audited by Socket on Jun 12, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill's purpose and examples are coherent for declarative UI rendering, and there is no sign of credential theft or malicious data routing. However, it includes transitive skill installation and unpinned remote registry installs, which increase supply-chain risk beyond what is strictly necessary for a widget-rendering guide.

Confidence: 100%Severity: 60%

Audit Metadata

Analyzed At

Jun 12, 2026, 10:28 PM

Package URL

pkg:socket/skills-sh/qu-skills%2Fskills%2Fwidgets-ui%2F@b279b756f9eb633e66eb94514678f82368d643e5cad79fcaa93e3642220200f9