skills/101-skills/skills/javascript-sdk/Socket

javascript-sdk

Warn

Audited by Socket on Jul 7, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core SDK documentation is largely coherent and uses standard npm distribution, but the skill is broadened by explicit transitive skill-install instructions and agent/tool patterns that expand trust beyond a simple JavaScript SDK. The main concern is scope creep and external skill installation, not confirmed malware.

Confidence: 87%Severity: 62%

Audit Metadata

Analyzed At

Jul 7, 2026, 11:42 PM

Package URL

pkg:socket/skills-sh/101-skills%2Fskills%2Fjavascript-sdk%2F@7d428b467344dc4e01573a9c8159b873a525a82fd2dd7b237fed3297d24b6456