SVGO SVG Optimization Tool

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is coherent with SVGO, and no credential or exfiltration behavior is visible, but the skill is distributed through a third-party marketplace/transitive installer rather than directly from the official SVGO publisher. This makes it a moderate supply-chain and trust-chain risk rather than a clearly benign same-org skill.

Confidence: 85%Severity: 58%
Audit Metadata
Analyzed At
Mar 29, 2026, 04:38 AM
Package URL
pkg:socket/skills-sh/agentskillexchange%2Fskills%2Fsvgo-svg-optimization-tool%2F@2f6d87eb13ff619ce072131e46b3d1d476cbe8c2