react-core
Audited by Socket on Feb 16, 2026
1 alert found:
Security[Skill Scanner] Download or install from free hosting/deployment platform detected This is a benign instructional README-like file containing React best-practice examples. The only actionable persistence is the illustrative useLocalStorage hook which legitimately reads and writes to window.localStorage; that pattern is expected but should not be used for sensitive secrets. No network exfiltration, hidden backdoors, dynamic code execution, or hardcoded secrets were found. LLM verification: BENIGN: The skill/document demonstrates standard React best-practices with no executable malicious payloads. The presence of template literals and a hosting URL is documentation-oriented and not indicative of malicious activity. LocalStorage usage should be reviewed in real apps to avoid storing sensitive data; otherwise, the material is suitable as reference material for React patterns.