nextjs

Warn

Audited by Socket on Aug 11, 2026

1 alert found:

Anomaly
AnomalyLOW
templates/cache-component-use-cache.tsx

No clear evidence of supply-chain malware/backdoors in this snippet. The dominant security concern is DOM XSS: remote post.content is inserted into the DOM via dangerouslySetInnerHTML without sanitization in this module. Additional risks include authorization/data exposure if cookie role is not strongly validated and server-side resource selection is trusted too much, plus downstream stored injection risk from createPost forwarding unvalidated content to the backend. Overall, treat this module as security-relevant and ensure HTML sanitization and robust authentication/authorization checks are enforced upstream (and/or before rendering).

Confidence: 72%Severity: 62%
Audit Metadata
Analyzed At
Aug 11, 2026, 09:47 PM
Package URL
pkg:socket/skills-sh/spiosifidis%2Fmy-claude-skills%2Fnextjs%2F@d5d6dbb8029c73a538126a894878724f4b68f11782a7c10a0ecb147357cbf9e6
Security Audit — socket — nextjs