Cypress Visual Regression Testing Suite
Warn
Audited by Socket on Oct 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's stated purpose is coherent, but its actual function is mainly to install another remotely hosted skill, creating transitive trust and unreviewed permission inheritance. The npm/GitHub path is same-org and plausible, which lowers malware likelihood, but unpinned remote installs and the mismatched OpenClaw command keep overall risk at medium.
Confidence: 89%Severity: 64%
Audit Metadata