skills/system-desgin/agentds/carbon/Socket

carbon

Warn

Audited by Socket on Jul 21, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core styling purpose is plausible, but the skill routes authoritative Carbon guidance through a non-IBM personal service and encourages transitive skill installation. The main risks are third-party supply-chain trust and remote prompt injection, not confirmed malware.

Confidence: 88%Severity: 66%

Audit Metadata

Analyzed At

Jul 21, 2026, 02:56 PM

Package URL

pkg:socket/skills-sh/System-Desgin%2FAgentDS%2Fcarbon%2F@a7903ffe9330e17845753536aa485f42daf41b98b953f1d6afdf7b815a54c92e