claude-design-system-hooks

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated design-to-code purpose is plausible, but the actual install and auth flow relies on unverifiable third-party packages/CLI and a container image that do not match Anthropic's documented Claude Design setup. Because the skill asks users to pass API keys into that unverified tooling and can install further community packages, its footprint is disproportionate and high risk even without confirmed malicious payloads.

Confidence: 88%Severity: 84%
Audit Metadata
Analyzed At
Sep 16, 2026, 04:00 AM
Package URL
pkg:socket/skills-sh/reason-machines%2Fdesign-skills%2Fclaude-design-system-hooks%2F@838d256e12a35574c6441fdbe6cb82d949181985ecca275323e3ebc4930ca1ce