site-generation

Warn

Audited by Socket on Jun 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core React/Vite site-generation guidance is coherent, and the main package installs are from official ecosystems. The main concern is scope creep: it instructs transitive installation of extra Vercel agent skills, expanding trust and possible data exposure beyond what is necessary to build a website. Overall this looks more like a legitimate but risky developer skill than malware.

Confidence: 90%Severity: 61%
Audit Metadata
Analyzed At
Jun 30, 2026, 11:32 AM
Package URL
pkg:socket/skills-sh/reggiechan74%2Fcc-plugins%2Fsite-generation%2F@f53dc1cf9db6c1046755f0cf85b72a51fcaf5150935dbdd4053ff21c5a753f39
Security Audit — socket — site-generation