skills/skilld-dev/vue-ecosystem-skills/unhead-vue-skilld/Socket

unhead-vue-skilld

Warn

Audited by Socket on May 5, 2026

1 alert found:

Anomaly

Anomalyreferences/issues/issue-320.md

LOW

AnomalyLOW

references/issues/issue-320.md

Not inherently malicious. The main security concern is trusting and loading external scripts. To reduce risk, apply SRI, CSP, origin validation, and dependency governance when using dynamic external script loading patterns like useScript with idle triggers.

Confidence: 75%Severity: 50%

Audit Metadata

Analyzed At

May 5, 2026, 12:00 PM

Package URL

pkg:socket/skills-sh/skilld-dev%2Fvue-ecosystem-skills%2Funhead-vue-skilld%2F@2b27fbd447899d50591413d91ff93325f6616f92