antd

Warn

Audited by Socket on Mar 27, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core antd assistance behavior is broadly coherent, but the install trust and data-flow story are inconsistent. The skill relies on an unpinned global npm CLI whose official provenance was not clearly verified, and it claims offline-only behavior while including networked bug submission and auto-update/reporting flows.

Confidence: 79%Severity: 61%
Audit Metadata
Analyzed At
Mar 27, 2026, 03:21 AM
Package URL
pkg:socket/skills-sh/ant-design%2Fantd-skill%2Fantd%2F@ba231e108b81110483288b3429ee13e2316f8e65