site-builder

Warn

Audited by Socket on Aug 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the core website-building behavior is coherent, but the skill has a high-risk footprint due to transitive skill installation, unpinned external installers, credential collection/forwarding, secret storage guidance for optional MCPs, and autonomous deployment/PR actions. Not confirmed malware, but dangerous enough to require strong review and user approvals.

Confidence: 90%Severity: 84%
Audit Metadata
Analyzed At
Aug 8, 2026, 08:52 AM
Package URL
pkg:socket/skills-sh/ravindra-gadekar%2Fsite-builder-plugin%2Fsite-builder%2F@81ee72dac7d2b81550af5eb4fb0cba82b37f2194e97371c0d7220905740a5560
Security Audit — socket — site-builder