aipixelperfect-design-engine

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the functional scope mostly matches a design-generation service, but the installation and trust story does not. The skill routes users to a third-party GitHub repo unrelated to the official web-based product, asks for several credentials, and suggests local execution despite official messaging saying no installation is needed. No confirmed malware or direct exfiltration is shown, but the supply-chain and provenance inconsistencies make this high-risk to trust.

Confidence: 90%Severity: 72%
Audit Metadata
Analyzed At
Sep 16, 2026, 04:00 AM
Package URL
pkg:socket/skills-sh/reason-machines%2Fdesign-skills%2Faipixelperfect-design-engine%2F@b18ef0eebb524000abd3b2d912ba4186e0b8e835ae6bc5d08f647d9226cc8664