react-state

Warn

Audited by Socket on Mar 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s Zustand guidance is benign, but the mandatory spawning of multiple external agents/tools and doc-query services is broader than necessary for a React state-management helper. No direct malware, credential theft, or unsafe installer is present, but the transitive trust and external-content-to-code path raise medium security concerns.

Confidence: 83%Severity: 58%
Audit Metadata
Analyzed At
Mar 18, 2026, 10:25 PM
Package URL
pkg:socket/skills-sh/fusengine%2Fagents%2Freact-state%2F@de8a29b35fb54421371ddf0b8530409041382cad