typescript-project

Warn

Audited by Socket on Aug 6, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: mostly a benign documentation skill, but its footprint is not perfectly proportional to a TypeScript architecture guide because it strongly prescribes LiteLLM as a proxy layer for all LLM integrations and promotes unpinned 'latest' installs. Install sources are largely official and verifiable, so this is not malware, but the added credential-routing and supply-chain exposure make it medium risk.

Confidence: 86%Severity: 56%
Audit Metadata
Analyzed At
Aug 6, 2026, 12:37 AM
Package URL
pkg:socket/skills-sh/majiayu000%2Fspellbook%2Ftypescript-project%2F@f978eb52133b1f9d2d7655d051659c49670e64e03f7c821ae35a6f4eb49ac08a
Security Audit — socket — typescript-project