oiloil-ui-ux-guide

Fail

Audited by Socket on Mar 7, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The OilOil UI/UX Guide skill aligns with its stated purpose of providing UI/UX guidance and reviews. It relies on a standard third-party install pattern (npx from a GitHub repo) which introduces a modest supply-chain/data-flow risk but is common for developer tooling. There are no credential requirements, no data exfiltration evident, and no autonomous real-world actions beyond design guidance delivery. Overall, the footprint is benign with moderate risk due to transitive installation from an external source; ensure trust in the upstream repository and consider pinning a specific version or using a verified registry to reduce supply-chain risk.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 7, 2026, 06:53 PM
Package URL
pkg:socket/skills-sh/davepoon%2Fbuildwithclaude%2Foiloil-ui-ux-guide%2F@04096312ec88d94cc225ef30c305eedadd2d8206