storybook-config

Warn

Audited by Socket on Feb 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

This Skill is a configuration/template generator for Storybook 10 and contains normal, expected instructions for creating .storybook configuration files, adding recommended addons, and mocking native platform APIs for Tauri and Electron. I found no evidence of malicious code, credential harvesting, remote exfiltration endpoints, or obfuscated payloads in the provided text. The primary risks are supply-chain and operational: reliance on unpinned npm/npx installs (including '@latest'), and the instruction to run shell scripts (detect-framework.sh) which should be reviewed before execution. Granting an automated agent Bash/edit privileges raises the potential for misuse if the scripts or generated commands are not reviewed. Overall the content is coherent with its stated purpose but operators should: (1) audit any included shell scripts before running, (2) prefer pinned dependency versions rather than '@latest', and (3) grant execution permissions only after review.

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Feb 28, 2026, 05:51 AM
Package URL
pkg:socket/skills-sh/flight505%2Fstorybook-assistant%2Fstorybook-config%2F@3a129def87a9f4cafdbc75063c35207c697b234a