skills/the-focus-ai/standards/paged-reports/Socket

paged-reports

Warn

Audited by Socket on Jul 29, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill's purpose and local file access are proportionate for report/PDF generation, and no credential harvesting or third-party data exfiltration is described. However, it delegates core PDF rendering to an unpinned cached marketplace binary from a weakly verifiable third-party plugin source, which materially elevates supply-chain risk.

Confidence: 88%Severity: 82%

Audit Metadata

Analyzed At

Jul 29, 2026, 08:09 AM

Package URL

pkg:socket/skills-sh/The-Focus-AI%2Fstandards%2Fpaged-reports%2F@ac1052ba44e3d65970ea0ba4597e1319a9399d45447fffca4078e8b9ab629eff