skills/timurgaleev/vibestack/make-pdf/Socket

make-pdf

Warn

Audited by Socket on Jun 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: core PDF functionality is plausible, but the skill is over-scoped for its purpose. The biggest issues are eval of a helper binary's output and dependence on unverifiable local vibestack binaries unrelated to basic PDF generation; no clear credential theft or confirmed exfiltration is shown.

Confidence: 84%Severity: 64%

Audit Metadata

Analyzed At

Jun 23, 2026, 10:52 AM

Package URL

pkg:socket/skills-sh/timurgaleev%2Fvibestack%2Fmake-pdf%2F@833ca5cd01d3436c344bee0ce765cd35bf5f3f9a771b4c7a93d7f40ab7647ffe