skills/magentosh/skills/javascript-sdk/Socket

javascript-sdk

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core SDK documentation is largely coherent and uses official npm/docs channels, but the skill unnecessarily instructs installation of an additional third-party skill (`belt-sh/cli`), creating transitive trust unrelated to a JavaScript SDK guide. Main risk is supply-chain and scope creep rather than confirmed malware.

Confidence: 87%Severity: 58%

Audit Metadata

Analyzed At

Jul 23, 2026, 06:04 PM

Package URL

pkg:socket/skills-sh/magentosh%2Fskills%2Fjavascript-sdk%2F@2c68f70078207333c94c88df6878f1d482db92970081eac0783c44be93f2cba5