htmx

Fail

Audited by Socket on Mar 9, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill's footprint is coherent with its stated purpose: it documents and demonstrates legitimate Go templating patterns for htmx, including fragment vs. full-page responses, safe dynamic attribute construction, CSRF considerations, and HTMX header usage. There are no evident malicious data flows, credential harvesting, or insecure download patterns. The main caution is the use of external CDN extensions; ensure version pinning and integrity verification in production to maintain supply-chain security. Overall, this is BENIGN with MEDIUM guidance risk due to external dependencies.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 9, 2026, 03:20 AM
Package URL
pkg:socket/skills-sh/gopherguides%2Fgopher-ai%2Fhtmx%2F@ce58a1ea0f9108124aa05535323097580f40290c