svelte
Audited by Socket on Feb 15, 2026
1 alert found:
Security[Skill Scanner] Download or install from free hosting/deployment platform detected The fragment is benign and consistent with its stated purpose of describing Svelte 5 capabilities, Runed API usage, and SvelteKit integration. No actionable security risks are evident from the documentationSample alone; ensure future artifacts from published packages are sourced from trusted registries and maintainers to avoid supply-chain risks. LLM verification: The provided SKILL.md content is documentation and example code for Svelte 5 and SvelteKit usage. It contains no evidence of malicious behavior, credential harvesting, obfuscated payloads, or suspicious network exfiltration. Static scanner flags are false positives caused by template strings and normal install instructions. Overall the fragment appears benign, with a low but non-zero security consideration that any referenced external functions (e.g. search(query)) could perform network activity