latest-astro

Warn

Audited by Socket on Feb 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

[Skill Scanner] Download or install from free hosting/deployment platform detected All findings: [HIGH] supply_chain: Download or install from free hosting/deployment platform detected (SC007) [AITech 9.1.4] [HIGH] supply_chain: Download or install from free hosting/deployment platform detected (SC007) [AITech 9.1.4] BENIGN: The fragment is a consistent knowledge resource describing Astro features and migrations; it does not perform data collection, credential handling, or network communication. No suspicious or malicious behavior detected based on the provided content. LLM verification: BENIGN. The skill fragment purely documents Astro knowledge and related resources with no actionable runtime data flow, credential usage, or external downloads embedded in executable form. The presence of links is consistent with documentation references rather than operations that exfiltrate data or install software.

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Feb 15, 2026, 08:50 PM
Package URL
pkg:socket/skills-sh/jovermier%2Fclaude-code-plugins-ip-labs%2Flatest-astro%2F@11ba9829a73997b8424b985c96e430e626f532c9