adobe-indesign-2026-workflow

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s core purpose is benign documentation, but it introduces an unrelated remote PowerShell installer from a third-party GitHub account. That install path is not needed for an InDesign workflow guide and creates a high supply-chain risk despite no direct credential handling being shown.

Confidence: 95%Severity: 91%
Audit Metadata
Analyzed At
Sep 16, 2026, 03:59 AM
Package URL
pkg:socket/skills-sh/reason-machines%2Fdesign-skills%2Fadobe-indesign-2026-workflow%2F@fd3c1cb43e19adaf34da7096ffb2dd878d822200ce9442029abcfd63c8e9a00e