skills/jd-solanki/skills/adopt-nuxtstart-changes/Socket

adopt-nuxtstart-changes

Warn

Audited by Socket on Aug 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core git-audit and merge behavior is coherent with the stated purpose, and there is no clear credential harvesting or exfiltration. The main concern is the explicit installation of an additional skill via unpinned `npx ... @latest`, which creates avoidable supply-chain and transitive-trust risk for an otherwise benign repository-maintenance skill.

Confidence: 89%Severity: 56%

Audit Metadata

Analyzed At

Aug 23, 2026, 02:59 AM

Package URL

pkg:socket/skills-sh/jd-solanki%2Fskills%2Fadopt-nuxtstart-changes%2F@2da05eeb666b9e0001e7cb91f15d6132088b43427d14f37268bc88527b6f340a