konva

Fail

Audited by Socket on Mar 10, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The Konva skill appears to be a developer tooling aid for building interactive canvas apps with React-Konva. Its footprint is coherent with the stated purpose: it provides integration patterns, UI examples, and common export workflows. There are minor implementation anomalies (undefined variables in sample code) that could hinder execution but do not indicate security risk. There are no evident credential requirements, no unverifiable binaries, and no benign-to-malicious data exfiltration patterns. Overall, the skill is BENIGN with low security risk, though attention should be paid to completing the sample code to avoid runtime failures.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 10, 2026, 05:57 AM
Package URL
pkg:socket/skills-sh/TerminalSkills%2Fskills%2Fkonva%2F@2b4085c647b66f5a553acc60183305c89153034b