design-shotgun

Warn

Audited by Socket on Oct 26, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core design-generation workflow is coherent, and the localhost board reload is benign, but the skill is wrapped in a much larger gstack control plane that performs config changes, telemetry/artifact sync, eval-driven helper execution, repo modification, and commits unrelated to simple design exploration. The main risk is disproportionate scope and unverifiable local binaries receiving project context, not confirmed malware.

Confidence: 87%Severity: 74%
Audit Metadata
Analyzed At
Oct 26, 2026, 06:33 PM
Package URL
pkg:socket/skills-sh/thetalentcat%2Fclaude-skills%2Fdesign-shotgun%2F@319d881bb8d20792f78b62574096fa0c299da852