avonni-lwc-components

Warn

Audited by Socket on Aug 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS due to reliance on an external MCP server whose provenance and distribution could not be verified from public evidence, triggering a high supply-chain risk floor. The rest of the skill is narrowly scoped and internally aligned with Avonni LWC component integration, with no direct credential theft, shell execution, or clear exfiltration behavior in the text itself.

Confidence: 87%Severity: 72%
Audit Metadata
Analyzed At
Aug 12, 2026, 08:06 PM
Package URL
pkg:socket/skills-sh/avonni%2Fskills%2Favonni-lwc-components%2F@0357501caca9ee8f0835156623de71e64bc40503c3edde536c66b62a2e974cc6