wpf-ui

Warn

Audited by Socket on Jun 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s stated purpose is benign, but its install instructions do not match official WPF distribution or tooling. The main risk is supply-chain confusion: users may install and run an unrelated third-party npm package under the guise of Microsoft WPF guidance.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 17, 2026, 03:09 PM
Package URL
pkg:socket/skills-sh/ssrjkk%2Fclaude-skills%2Fwpf-ui%2F@313f3ef97ca9345bf00e0e1e415997bbe62bf6f9119aa41cdd4ffb46d37ab813
Security Audit — socket — wpf-ui