vibe-deck

Warn

Audited by Socket on Oct 10, 2026

1 alert found:

Anomaly
AnomalyLOW
template/src/components/PasswordGate.jsx

No evidence of malware or data exfiltration. This is a weak client-side access-control mechanism: its verification logic and expected hash are exposed, localStorage can be forged, and the fallback password is predictable. Do not rely on it to protect sensitive content; enforce authorization on a trusted server.

Confidence: 99%Severity: 68%
Audit Metadata
Analyzed At
Oct 10, 2026, 10:16 AM
Package URL
pkg:socket/skills-sh/aiden0z%2Fskills%2Fvibe-deck%2F@db950844fd72984087526a525c42cf710e8a532d4e156c68dbd8eeb42d233281