content-review
Warn
Audited by Socket on Aug 24, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The core capability matches the stated purpose, but the trust boundary is weakened by reliance on a third-party GitHub-hosted Figma bridge with inconsistent publisher identity and by instructions to execute commands without normal permission prompts. Data access appears proportionate to content review, but install/execution trust is only medium-high confidence and should be reviewed before use.
Confidence: 84%Severity: 74%
Audit Metadata