auth-and-secure-storage

Warn

Audited by Socket on Oct 18, 2026

1 alert found:

Anomaly
AnomalyLOW
tests/bases/app/skills/planted/leak.ts

The function exposes the supplied access token by writing it to console logs, which is a credential-handling security risk. The SecureStore read has no observable effect in this fragment, and there is no evidence of network exfiltration or broader malware behavior. Severity is moderate for applications that invoke this function with real credentials.

Confidence: 99%Severity: 55%
Audit Metadata
Analyzed At
Oct 18, 2026, 11:26 AM
Package URL
pkg:socket/skills-sh/zakariaf%2Freactnative-skills%2Fauth-and-secure-storage%2F@6f8486740ba4f50831ff483f085307833377402c1f843354d75673970c720d1c