design-to-code

Warn

Audited by Socket on Mar 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s core frontend-design purpose is coherent with local file edits, tests, and theming work, and there is no direct credential harvesting or external data routing. The main risk is transitive trust and autonomy: it chains into multiple unreviewed local slash skills, makes commits, and writes optional telemetry in Claude memory without pausing for approval.

Confidence: 89%Severity: 54%
Audit Metadata
Analyzed At
Mar 23, 2026, 11:03 AM
Package URL
pkg:socket/skills-sh/tinh2%2Fskills-hub-registry%2Fdesign-to-code%2F@a1499e8cf69c419bf695a83be6e4a32ecd4ea278
Security Audit — socket — design-to-code