react-core

Warn

Audited by Socket on Feb 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

[Skill Scanner] Download or install from free hosting/deployment platform detected This is a benign instructional README-like file containing React best-practice examples. The only actionable persistence is the illustrative useLocalStorage hook which legitimately reads and writes to window.localStorage; that pattern is expected but should not be used for sensitive secrets. No network exfiltration, hidden backdoors, dynamic code execution, or hardcoded secrets were found. LLM verification: BENIGN: The skill/document demonstrates standard React best-practices with no executable malicious payloads. The presence of template literals and a hosting URL is documentation-oriented and not indicative of malicious activity. LocalStorage usage should be reviewed in real apps to avoid storing sensitive data; otherwise, the material is suitable as reference material for React patterns.

Confidence: 90%Severity: 75%
Audit Metadata
Analyzed At
Feb 16, 2026, 10:40 AM
Package URL
pkg:socket/skills-sh/alicoder001%2Fagent-skills%2Freact-core%2F@26b92ef0f16d031b258a07dda03ddffef745ede0