product-inspiration

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core purpose is coherent, and the visible external service (Tavily) appears official, so this is not outright malicious. However, the skill is overpowered for a research/inspiration workflow because it combines untrusted web intake with Write+Bash and a transitive /electron skill dependency of unknown provenance, creating medium risk of unsafe file changes or inherited trust abuse.

Confidence: 84%Severity: 61%
Audit Metadata
Analyzed At
Apr 29, 2026, 03:13 AM
Package URL
pkg:socket/skills-sh/laststance%2Fskills%2Fproduct-inspiration%2F@7375d9770bf8123aa850656b399203b1b6aefeb9