lightning-architecture-review
Warn
Audited by Socket on Mar 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The stated purpose is coherent for an architecture-review skill, and the skill text itself is mostly informational. The main risk comes from steering users toward an externally hosted reference implementation with weaker provenance: a personal numeric GitHub account, a standalone .win domain, unsigned-looking release binaries, and transitive dependency fetching. This is not confirmed malicious, but the external trust chain is disproportionate for a pure review skill and warrants caution.
Confidence: 81%Severity: 56%
Audit Metadata