skills/bankai-skills/superpowers/javascript-sdk/Socket

javascript-sdk

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS due to transitive skill installation instructions that are broader than a normal SDK documentation skill, especially the unrelated belt-sh/cli add command. Aside from that, the core SDK install/auth/data flows are consistent with an official inference.sh JavaScript SDK guide and show no direct credential theft or hidden exfiltration.

Confidence: 93%Severity: 62%

Audit Metadata

Analyzed At

Sep 14, 2026, 05:53 PM

Package URL

pkg:socket/skills-sh/bankai-skills%2Fsuperpowers%2Fjavascript-sdk%2F@2c68f70078207333c94c88df6878f1d482db92970081eac0783c44be93f2cba5