bun-sveltekit

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: mostly a legitimate documentation skill for Bun + SvelteKit, with official Bun/Svelte install flows and no evident credential theft or covert exfiltration. The main inconsistency is recommending a community Bun adapter instead of the official same-org @sveltejs/adapter-bun, plus a transitive skill-loading instruction; these make it medium supply-chain risk rather than benign.

Confidence: 90%Severity: 52%
Audit Metadata
Analyzed At
Sep 15, 2026, 12:02 AM
Package URL
pkg:socket/skills-sh/secondsky%2Fclaude-skills%2Fbun-sveltekit%2F@10cd620774db552d287edbf883de0677b9e44415e20aaa1abc3cc26c134b6393
Security Audit — socket — bun-sveltekit