co-star-ui

Fail

Audited by Socket on Mar 9, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The CO-STAR UI skill is coherently scoped to its stated purpose: guiding UI work and custom CO-STAR prompt creation with discovery-first workflows. It does not appear to require or transmit credentials, perform remote actions, or download/install unknown binaries. The security footprint is low and proportional to its design/prompting focus. No evident data exfiltration or supply-chain risks are present in the described content. Overall, the skill is benign with respect to security posture, assuming usage remains within documented discovery, planning, and UI/prompt-generation activities.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 9, 2026, 03:48 AM
Package URL
pkg:socket/skills-sh/justinedevs%2Fcollection%2Fco-star-ui%2F@2ca7018e2c2d4ebc927b1e91cbb81074a472a59e