skills/yray/skills/html-to-interaction-prompts/Socket

html-to-interaction-prompts

Warn

Audited by Socket on Aug 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill is broadly scoped but coherent for content-capture workflows, with low install-trust and credential risk. The main concern is indirect prompt-injection exposure from analyzing arbitrary live webpages while also being allowed to write files and make git commits.

Confidence: 88%Severity: 56%

Audit Metadata

Analyzed At

Aug 25, 2026, 03:08 AM

Package URL

pkg:socket/skills-sh/yray%2Fskills%2Fhtml-to-interaction-prompts%2F@92fb6f112217f5afc36044615db602fbd5ba1ae6e1aeb50df9ae38845bb13ab2