typescript-advanced-types

Fail

Audited by Socket on Mar 2, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The document itself (TypeScript advanced-types guide and examples) contains no malicious code or obvious unsafe constructs. The single security issue is the included external 'npx skills add' instruction which creates a supply-chain risk: running it will download and execute third-party code from GitHub. That transitive-install pattern should be treated as potentially dangerous until the remote repository and its install scripts are audited and pinned. Overall, snippets are safe to read and copy; avoid executing the unpinned npx install in production or privileged environments without prior review.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 2, 2026, 05:38 PM
Package URL
pkg:socket/skills-sh/rcrespo-tripulse%2Ftripulse-skills%2Ftypescript-advanced-types%2F@63e16d6c2dca571f9ef4f38f1d4c491429c4e0e3