game-3d-asset-pipeline

Warn

Audited by Socket on Jul 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core asset-pipeline purpose is coherent, but the skill has medium risk because it combines broad autonomous project changes, third-party provider routing, authenticated browser uploads, and self-modification with an unpinned `npx skiller@latest` execution path. No confirmed credential theft or overtly malicious behavior is present, but install trust and scope are broader than ideal.

Confidence: 79%Severity: 62%
Audit Metadata
Analyzed At
Jul 15, 2026, 08:25 PM
Package URL
pkg:socket/skills-sh/zbeyens%2Fthreejs-template%2Fgame-3d-asset-pipeline%2F@498afdea61a2193c2033c53d7a00b0300dc32c4ab35e9a1873c64340cdd64642