site-builder
Warn
Audited by Socket on Aug 8, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the core website-building behavior is coherent, but the skill has a high-risk footprint due to transitive skill installation, unpinned external installers, credential collection/forwarding, secret storage guidance for optional MCPs, and autonomous deployment/PR actions. Not confirmed malware, but dangerous enough to require strong review and user approvals.
Confidence: 90%Severity: 84%
Audit Metadata