frontend-landings

Warn

Audited by Socket on Sep 8, 2026

1 alert found:

Security
SecurityMEDIUM
deploy.sh

This Bash deployment fragment is dominated by informational output, but it includes a high-impact supply-chain risk pattern: it promotes (and likely relies on) fetching a remote `install.sh` from GitHub Raw and executing it directly with `bash`, without any integrity verification or commit pinning shown here. If the upstream script is modified, compromised, or tampered with, any system running the install command could be fully compromised. The excerpt is truncated to the end portion, so additional malicious behaviors elsewhere cannot be ruled out, but no explicit exfiltration/persistence is visible in the provided fragment.

Confidence: 62%Severity: 72%
Audit Metadata
Analyzed At
Sep 8, 2026, 08:04 AM
Package URL
pkg:socket/skills-sh/ume0207%2Fclaude-code-skills%2Ffrontend-landings%2F@7ed1835797ac4cab55619e808cb9aaf8ba3ac0208425ced064715e41951ea224