agent-ready-nextjs

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Security
SecurityMEDIUM
scripts/scaffold.mjs

No direct malware behavior is evident. The generator has a path traversal risk through features.sectionLlmsTxt that can write outside the target directory, and untrusted configuration may inject code into generated source files. Use only trusted configuration and validate section paths and escaped generated values.

Confidence: 98%Severity: 72%
Audit Metadata
Analyzed At
Oct 9, 2026, 09:03 AM
Package URL
pkg:socket/skills-sh/akashp1712%2Fskills%2Fagent-ready-nextjs%2F@45ea570fac43293ee455e0ddad7dafa835c903953ee282a1b6b94b4c9e47d0f8