typescript-project
Warn
Audited by Socket on Aug 6, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: mostly a benign documentation skill, but its footprint is not perfectly proportional to a TypeScript architecture guide because it strongly prescribes LiteLLM as a proxy layer for all LLM integrations and promotes unpinned 'latest' installs. Install sources are largely official and verifiable, so this is not malware, but the added credential-routing and supply-chain exposure make it medium risk.
Confidence: 86%Severity: 56%
Audit Metadata