artifacts-builder

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is coherent for frontend artifact generation, but the submitted skill is not internally cleanly aligned with its claimed Anthropic upstream: it introduces an unverified core dependency and hides important install behavior inside unreviewed scripts. This is more consistent with a medium supply-chain risk skill than a benign documentation-only builder.

Confidence: 86%Severity: 70%
Audit Metadata
Analyzed At
Sep 16, 2026, 05:10 AM
Package URL
pkg:socket/skills-sh/shipshitdev%2Fskills%2Fartifacts-builder%2F@bd6df8f7c199d2ae7976e75ae6243c3904f77fbee8f6c4cfd32615e486588f6b
Security Audit — socket — artifacts-builder