react-bits
Warn
Audited by Socket on Apr 12, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The stated purpose is benign and narrowly scoped, and the skill does not request credentials or route data to third-party endpoints. However, the install instruction is internally inconsistent with the referenced project and may install an unrelated npm package, creating a medium supply-chain risk.
Confidence: 91%Severity: 56%
Audit Metadata