project-structure-guide

Warn

Audited by Socket on May 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core guidance is benign, but the mandatory use of an unverified `uds` validator is not well justified for a simple project-structure skill, and the skill also nudges users into additional skill invocations. Main concern is install/execution trust rather than confirmed malicious behavior.

Confidence: 83%Severity: 72%
Audit Metadata
Analyzed At
May 8, 2026, 04:01 AM
Package URL
pkg:socket/skills-sh/AsiaOstrich%2Funiversal-dev-standards%2Fproject-structure-guide%2F@5870a8fd7ca670ea82e656e7a9f56b027cd09cfb