react-bits

Warn

Audited by Socket on Apr 12, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The stated purpose is benign and narrowly scoped, and the skill does not request credentials or route data to third-party endpoints. However, the install instruction is internally inconsistent with the referenced project and may install an unrelated npm package, creating a medium supply-chain risk.

Confidence: 91%Severity: 56%
Audit Metadata
Analyzed At
Apr 12, 2026, 11:57 AM
Package URL
pkg:socket/skills-sh/neuron-one%2FGODMODE%2Freact-bits%2F@f6d1e7c6e6f1f36210394070c9c56b2a15e27969
Security Audit — socket — react-bits