skills/pedronauck/skills/pitch-deck-visuals/Socket

pitch-deck-visuals

Fail

Audited by Socket on Mar 18, 2026

1 alert found:

Malware

MalwareSKILL.md

HIGH

MalwareHIGH

SKILL.md

SUSPICIOUS: the core purpose is coherent, but the skill combines a remote CLI installer, credentialed use of a third-party platform, broad Bash permission, and transitive skill installation. This looks more like a platform-dependent workflow guide than malware, but its trust and scope are broader than a simple pitch-deck visuals skill warrants.

Confidence: 86%Severity: 56%

Audit Metadata

Analyzed At

Mar 18, 2026, 01:55 AM

Package URL

pkg:socket/skills-sh/pedronauck%2Fskills%2Fpitch-deck-visuals%2F@1ffc3b7a4961e6d921c2ac2a4e6b72cfd0fa5068