gatsby-ecommerce-netlify

Fail

Audited by Socket on Feb 21, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

[Skill Scanner] Destructive bash command detected (rm -rf, chmod 777) All findings: [CRITICAL] command_injection: Destructive bash command detected (rm -rf, chmod 777) (CI004) [AITech 9.1.4] [CRITICAL] command_injection: Destructive bash command detected (rm -rf, chmod 777) (CI004) [AITech 9.1.4] BENIGN: The code fragment represents standard setup, build, and deployment instructions for a public Netlify/Gatsby template. There is no evidence of malicious behavior, credential harvesting, or unintended data exfiltration within the provided fragment. LLM verification: The provided SKILL.md is documentation for scaffolding and deploying a Gatsby Netlify starter. It does not contain embedded malicious code or obvious backdoors. However, it instructs users to run potentially dangerous shell commands (rm -rf) and to install unpinned third-party packages, creating moderate supply-chain and operational risks (data loss and remote code execution during installs). Treat the file as non-malicious but risky: add usage warnings, avoid running destructive commands withou

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Feb 21, 2026, 02:26 PM
Package URL
pkg:socket/skills-sh/rebyteai-template%2Frebyte-skills%2Fgatsby-ecommerce-netlify%2F@0c2690a949fbdbcac44bc24a8771d000d952fc13