build-nitro-modules
Warn
Audited by Socket on Mar 14, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s purpose is coherent as a React Native/Nitro build guide, but its main install path is not internally consistent with the apparent official Nitro package name. Because it instructs remote execution of an apparently unrelated npm package with `@latest`, the install trust risk is medium-high even though there is no evidence of credential theft or exfiltration.
Confidence: 89%Severity: 72%
Audit Metadata