nuxt-init
Audited by Socket on Mar 7, 2026
1 alert found:
Obfuscated FileThe skill appears to be a reasonable developer-oriented scaffold tool for Nuxt 4 projects with standard tooling and optional Terraform-based infrastructure scaffolding. Its footprint is coherent with the stated purpose, relying on common package registries and a known Terraform scaffold tool. Security concerns are moderate due to the involvement of external tooling and potential cloud infrastructure provisioning, but there is no explicit credential harvesting or covert data exfiltration within the skill itself. Recommend ensuring explicit pinning/checksums for all external tools, documenting known-good sources, and advising users to apply least-privilege credentials when running Terraform workflows.