frontend-starter-kit
Warn
Audited by Socket on May 15, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the stated purpose matches frontend bootstrapping, but the skill mainly acts as a transitive installer for many other skills via unpinned `@latest`. The main risk is expanded trust and supply-chain exposure, not confirmed malware or direct credential theft in this file.
Confidence: 88%Severity: 62%
Audit Metadata