storybook-config
Audited by Socket on Feb 28, 2026
1 alert found:
SecurityThis Skill is a configuration/template generator for Storybook 10 and contains normal, expected instructions for creating .storybook configuration files, adding recommended addons, and mocking native platform APIs for Tauri and Electron. I found no evidence of malicious code, credential harvesting, remote exfiltration endpoints, or obfuscated payloads in the provided text. The primary risks are supply-chain and operational: reliance on unpinned npm/npx installs (including '@latest'), and the instruction to run shell scripts (detect-framework.sh) which should be reviewed before execution. Granting an automated agent Bash/edit privileges raises the potential for misuse if the scripts or generated commands are not reviewed. Overall the content is coherent with its stated purpose but operators should: (1) audit any included shell scripts before running, (2) prefer pinned dependency versions rather than '@latest', and (3) grant execution permissions only after review.