skills/reason-machines/design-skills/claude-design-ui-framework/Socket

claude-design-ui-framework

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s functional purpose is coherent for a Claude UI framework, and its API/data flows mostly match that purpose, but the installation path is inconsistent with the stated publisher and relies on a personal GitHub repo/ZIP without strong release verification. This is primarily a supply-chain trust problem, not confirmed malware.

Confidence: 90%Severity: 78%

Audit Metadata

Analyzed At

Sep 16, 2026, 04:00 AM

Package URL

pkg:socket/skills-sh/reason-machines%2Fdesign-skills%2Fclaude-design-ui-framework%2F@3cda02254ee02dee3b6e7fd067638157dad9641852d421992615417a45555fc3