skills/siliconpeasant/vibe_soc/soc-openroad/Socket

soc-openroad

Warn

Audited by Socket on Jul 12, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

Mostly purpose-aligned EDA automation with local file generation and ORFS execution, but it relies on an unverifiable soc-openroad MCP server. Official OpenROAD/ORFS usage reduces concern, yet the opaque MCP dependency makes the overall skill high security risk despite low evidence of malicious intent.

Confidence: 82%Severity: 70%

Audit Metadata

Analyzed At

Jul 12, 2026, 04:07 PM

Package URL

pkg:socket/skills-sh/siliconpeasant%2Fvibe_soc%2Fsoc-openroad%2F@99763b75cd9559d9d7e7a2dbee85cc862b221656e1c5e3e52a46670d9999e206