juicebox-local-dev-loop

Fail

Audited by Socket on Mar 12, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill purpose (local Juicebox development loop with mock data and test utilities) is coherent with the provided capabilities. It primarily instruments local environment setup and development workflows using conventional tools and a sandbox API key pattern. While there is a potential for credential exposure if secrets are mishandled, the footprint remains within expected development tooling boundaries and does not introduce risky data exfiltration or untrusted installs. Recommend clarifying secret-management guidance (never commit real keys, use env vars, add .env to .gitignore) and possibly remove hard-coded sample keys from examples to reduce risk.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 12, 2026, 12:34 AM
Package URL
pkg:socket/skills-sh/jeremylongshore%2Fclaude-code-plugins-plus-skills%2Fjuicebox-local-dev-loop%2F@0db548273ef5723b7df27627af58809c7a66bd9b