commit

Pass

Audited by Socket on Sep 19, 2026

Checks

Malicious behaviorInjection, exfiltration, untrusted installs

Security concernsCredential exposure, tool/trust exploitation

Code obfuscationHidden or obfuscated code

Suspicious patternsReconnaissance, excessive autonomy, resource use

Audit Metadata

Analyzed At

Sep 19, 2026, 07:12 AM

Package URL

pkg:socket/skills-sh/vainjs%2Fskills%2Fcommit%2F@b4e7e8375d71e88f8934f3a1a9ab6207e7421996375be3e70f7cdc0ec409cc84

Security Audit — socket — commit