skills/infsh-skills/skills/email-design/Socket

email-design

Warn

Audited by Socket on Apr 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core email-design content is benign, but the skill expands into external CLI installation/execution, credentialed login, and transitive skill installation. Same-project evidence suggests this is not outright malicious, yet the raw GitHub install path, CLI-name inconsistency (`belt` vs documented `infsh`), and extra skill-loading instructions make the trust model weaker than the stated purpose warrants.

Confidence: 82%Severity: 61%

Audit Metadata

Analyzed At

Apr 23, 2026, 10:14 PM

Package URL

pkg:socket/skills-sh/infsh-skills%2Fskills%2Femail-design%2F@367fde3bf6a3ddda2d4ed13031f0bb4575db6064