landing-page-design

Warn

Audited by Socket on Mar 7, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

The skill is coherent with its stated purpose as a landing-page design facilitator using AI-generated visuals and external inference tools. However, there are notable supply-chain and execution-trust concerns due to reliance on unverifiable external binaries/tools and potentially transitive installations. Data flow appears to be user-prompt-driven with no explicit credentials, which mitigates some risk, but the external tool usage elevates security risk to a moderate-to-high level. Overall, classify as SUSPICIOUS due to untrusted external dependencies and runtime execution patterns, though not obviously malicious in intent given its design context.

Confidence: 65%Severity: 65%
Audit Metadata
Analyzed At
Mar 7, 2026, 12:06 PM
Package URL
pkg:socket/skills-sh/toolshell%2Fskills%2Flanding-page-design%2F@2a69872227b9a83b20affc10933b980c68eafd1b