plan-it

Warn

Audited by Socket on Sep 5, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The planning purpose is mostly coherent, and the Vercel design-doc fetch is proportionate, but the full-plan workflow depends on executing a non-verified GitHub fork/branch of `lavish-axi` via `npx`. That install/execute path is inconsistent with the publicly documented package source and creates significant supply-chain risk; transitive installation of the `lavish` skill adds further trust expansion.

Confidence: 90%Severity: 82%
Audit Metadata
Analyzed At
Sep 5, 2026, 12:31 AM
Package URL
pkg:socket/skills-sh/timmyy3000%2Fskills%2Fplan-it%2F@809d84f74c0e78577f846b8f14c842c52595fd27e7abd88a4399ef8744d4b0f0
Security Audit — socket — plan-it