skills/yonatangross/orchestkit/design-context-extract/Socket

design-context-extract

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the workflow and data access are mostly coherent for a design-extraction skill, and the Google Stitch references align with the stated purpose. However, the skill relies on an unspecified core CLI with no verifiable install/provenance details, which is disproportionate supply-chain risk for an agent skill and triggers a high-risk classification despite otherwise benign intent.

Confidence: 88%Severity: 78%

Audit Metadata

Analyzed At

Sep 17, 2026, 02:16 AM

Package URL

pkg:socket/skills-sh/yonatangross%2Forchestkit%2Fdesign-context-extract%2F@af313c4056cf9ccd6f3f7df1b61fdab2ad7908a1e6765cb425185c82bd5818b9