oiloil-ui-ux-guide
Fail
Audited by Socket on Mar 7, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The OilOil UI/UX Guide skill aligns with its stated purpose of providing UI/UX guidance and reviews. It relies on a standard third-party install pattern (npx from a GitHub repo) which introduces a modest supply-chain/data-flow risk but is common for developer tooling. There are no credential requirements, no data exfiltration evident, and no autonomous real-world actions beyond design guidance delivery. Overall, the footprint is benign with moderate risk due to transitive installation from an external source; ensure trust in the upstream repository and consider pinning a specific version or using a verified registry to reduce supply-chain risk.
Confidence: 98%
Audit Metadata