frontend-module

Warn

Audited by Socket on Feb 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

[Skill Scanner] Credential file access detected All findings: [HIGH] data_exfiltration: Credential file access detected (DE002) [AITech 8.2.3] [HIGH] data_exfiltration: Credential file access detected (DE002) [AITech 8.2.3] This file is a documentation/readme for a frontend integration module and contains no direct malicious code. The main security considerations are operational supply-chain risks: scaffolding a Node project and running npm/Vite will execute third-party JavaScript (normal for front-end tooling) and a configurable Vite dev server URL could cause browsers to load assets from a remote/untrusted host if misconfigured. No evidence of embedded credential theft, obfuscated or intentionally malicious code in the provided text. Advise vetting scaffolded package.json, dependencies, and ensuring dev server is local/trusted.

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Feb 16, 2026, 11:35 AM
Package URL
pkg:socket/skills-sh/psincraian%2Fmyfy%2Ffrontend-module%2F@8c4e93ef75b9aeab3a7154c74cc7be3190fe5c38