tanstack-devtools-event-client-devtools-instrumentation

Fail

Audited by Snyk on Aug 10, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 0.90). The guidance exposes a high-risk data-exfiltration capability: emits bridge server↔client (WebSocket/SSE/BroadcastChannel) and examples explicitly send request URLs, params, session IDs, and full state snapshots — with an explicit option to enable events in production — enabling deliberate leakage of sensitive server- or user-side data to devtools/remote clients.

Issues (1)

E006
CRITICAL

Malicious code pattern detected in skill scripts.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 10, 2026, 10:57 AM
Issues
1