skills/lukasa1993/tanstack-skills-extracted/tanstack-devtools-event-client-devtools-instrumentation/Snyk
tanstack-devtools-event-client-devtools-instrumentation
Fail
Audited by Snyk on Aug 10, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E006: Malicious code pattern detected in skill scripts.
- Malicious code pattern detected (high risk: 0.90). The guidance exposes a high-risk data-exfiltration capability: emits bridge server↔client (WebSocket/SSE/BroadcastChannel) and examples explicitly send request URLs, params, session IDs, and full state snapshots — with an explicit option to enable events in production — enabling deliberate leakage of sensitive server- or user-side data to devtools/remote clients.
Issues (1)
E006
CRITICALMalicious code pattern detected in skill scripts.
Audit Metadata