skills/alovajs/skills/alova-server-usage/Socket

alova-server-usage

Warn

Audited by Socket on Nov 3, 2026

1 alert found:

Anomaly

Anomalyreferences/BFF_API_GATEWAY.md

LOW

AnomalyLOW

references/BFF_API_GATEWAY.md

No clear malicious behavior is evident in the shown code. The examples do present security risks: credentials and user data are sent over plain HTTP, and a token response may be cached. Use HTTPS and ensure sensitive responses are not cached or exposed.

Confidence: 96%Severity: 55%

Audit Metadata

Analyzed At

Nov 3, 2026, 06:25 AM

Package URL

pkg:socket/skills-sh/alovajs%2Fskills%2Falova-server-usage%2F@f49d121a8199fd746c71a11977e4a598b294827967c07f9c5f372bebec34c146