dashboard-patterns

Warn

Audited by Socket on Feb 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

This document is a frontend/dashboard design and implementation spec. It contains expected realtime and polling data flows (server fetches to BACKEND_URL, Supabase Realtime subscription) and UI/animation rules. There are no obvious malicious constructs: no download-and-execute patterns, no shell commands, no instructions to harvest local credentials, and no third-party transitive skill installations. The main security considerations are implementation-level: ensure Supabase and backend endpoints are properly authenticated, avoid embedding secret keys in client bundles, and configure BACKEND_URL and logging destinations correctly. Overall, the file appears benign but implementers must follow standard secure deployment practices to avoid credential leakage or misconfiguration-based exposures.

Confidence: 85%Severity: 75%
Audit Metadata
Analyzed At
Feb 28, 2026, 08:34 PM
Package URL
pkg:socket/skills-sh/cleanexpo%2Fnodejs-starter-v1%2Fdashboard-patterns%2F@7e87d420babb08a402eb48d3a9c7f5a688bd9c0d