designkit-ecommerce-product-kit

Warn

Audited by Socket on Mar 27, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS:技能目的与能力总体一致,属于电商套图生成流程;但核心执行完全依赖未披露实现的本地脚本,且实际后端/API 端点不可验证,导致安装执行信任与数据流透明度不足。未见明显凭证收集、第三方凭证转发或恶意外传证据,因此更像中度风险而非恶意技能。

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Mar 27, 2026, 04:57 AM
Package URL
pkg:socket/skills-sh/meitu%2Fdesignkit-skills%2Fdesignkit-ecommerce-product-kit%2F@fc4d83184bf019939a140ede4daeaa393dcc2fee