bun-sveltekit
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: mostly a legitimate documentation skill for Bun + SvelteKit, with official Bun/Svelte install flows and no evident credential theft or covert exfiltration. The main inconsistency is recommending a community Bun adapter instead of the official same-org @sveltejs/adapter-bun, plus a transitive skill-loading instruction; these make it medium supply-chain risk rather than benign.
Confidence: 90%Severity: 52%
Audit Metadata