skills/the-utopia-studio/skills/web-design-guidelines/Socket

web-design-guidelines

Warn

Audited by Socket on Aug 10, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The stated purpose is coherent and same-org hosting supports legitimacy, but the skill relies on mutable remote instructions fetched from an unpinned main branch. This is not confirmed malware, yet it creates a medium prompt supply-chain risk because upstream content can silently change the agent’s behavior at review time.

Confidence: 90%Severity: 53%

Audit Metadata

Analyzed At

Aug 10, 2026, 01:28 PM

Package URL

pkg:socket/skills-sh/the-utopia-studio%2Fskills%2Fweb-design-guidelines%2F@f3bc47f890f42a44db1007ab390709ec368e4b8c089baee6b0007182236ac474