diagram

Warn

Audited by Socket on Sep 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS leaning-high-risk due to transitive skill installation and unverified fork trust, not because of diagramming behavior itself. Purpose is coherent, but the actual install path asks the agent to fetch and execute another skill from a forked GitHub source that is not verified as the official publisher path; that makes the skill materially riskier than a normal documentation/integration skill despite no evidence of credential theft or exfiltration.

Confidence: 86%Severity: 76%
Audit Metadata
Analyzed At
Sep 20, 2026, 03:26 AM
Package URL
pkg:socket/skills-sh/rheinmir%2Fsetup%2Fdiagram%2F@54d51d599579ddceb8f50f654f6cedfe6559c83aea3b178da8e6e6afe5ecb8ea
Security Audit — socket — diagram