packaging-design
Warn
Audited by Socket on Oct 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core packaging-design purpose is benign and the requested inputs are proportionate, but the skill explicitly encourages routing API calls and keys through a third-party OpenAI-compatible gateway (including tryallapi.com) instead of official OpenAI endpoints. This creates unnecessary credential-forwarding and data-interception risk, though there is no evidence of hidden execution, malware payloads, or capabilities unrelated to packaging design.
Confidence: 90%Severity: 64%
Audit Metadata