design-to-code
Warn
Audited by Socket on Mar 23, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s core frontend-design purpose is coherent with local file edits, tests, and theming work, and there is no direct credential harvesting or external data routing. The main risk is transitive trust and autonomy: it chains into multiple unreviewed local slash skills, makes commits, and writes optional telemetry in Claude memory without pausing for approval.
Confidence: 89%Severity: 54%
Audit Metadata