diagram

Warn

Audited by Socket on Oct 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s purpose is coherent for diagram generation, but it asks the agent to install and execute another skill from an unverified fork (`Rheinmir/archify`). That transitive trust plus unpinned third-party code execution is disproportionate enough to raise security risk, even without clear credential theft or malicious data routing.

Confidence: 86%Severity: 78%
Audit Metadata
Analyzed At
Oct 14, 2026, 02:24 AM
Package URL
pkg:socket/skills-sh/rheinmir%2Fskills%2Fdiagram%2F@2c919c65d7d4ca43e6a0cb8c6d48ac9409e42814069b507ec89f22b21e781a8c