skills/thewiningturtle/claude-skills/product-skills/Socket

product-skills

Warn

Audited by Socket on Aug 30, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s stated purpose is benign and mostly aligned with local product/UX workflows, but its recommended installation relies on an unpinned third-party npm CLI from a different publisher, creating medium supply-chain and transitive-trust risk. No direct credential harvesting or malicious data flow is evident in the provided content.

Confidence: 85%Severity: 58%

Audit Metadata

Analyzed At

Aug 30, 2026, 03:48 AM

Package URL

pkg:socket/skills-sh/thewiningturtle%2Fclaude-skills%2Fproduct-skills%2F@28ccbf6f30f61347c454da9790f69e6e6eb7c1b4dfec6ebed42e119b6a9e493d