content-review

Warn

Audited by Socket on Aug 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The core capability matches the stated purpose, but the trust boundary is weakened by reliance on a third-party GitHub-hosted Figma bridge with inconsistent publisher identity and by instructions to execute commands without normal permission prompts. Data access appears proportionate to content review, but install/execution trust is only medium-high confidence and should be reviewed before use.

Confidence: 84%Severity: 74%
Audit Metadata
Analyzed At
Aug 24, 2026, 08:14 AM
Package URL
pkg:socket/skills-sh/renfei-design%2Ffigma-ai-bridge%2Fcontent-review%2F@7dbbee9f551ee04276980cf8241a22df6dfd847af55481ba3b4f95cb8a8d97fa