NYC

react-hooks-patterns

Warn

Audited by Socket on Feb 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

[Skill Scanner] Download or install from free hosting/deployment platform detected All findings: [HIGH] supply_chain: Download or install from free hosting/deployment platform detected (SC007) [AITech 9.1.4] [HIGH] supply_chain: Download or install from free hosting/deployment platform detected (SC007) [AITech 9.1.4] [HIGH] supply_chain: Download or install from free hosting/deployment platform detected (SC007) [AITech 9.1.4] BENIGN: The artifact comprises educational React Hooks usage examples with standard data flows and no hidden network transmissions, credentials, or data exfiltration. While SSR or non-browser environments could impact some samples, the content is appropriate for its stated purpose as a learning resource for React patterns. LLM verification: This skill is an instructional documentation file with example React Hook patterns. I found no indicators of malicious behavior or supply-chain attacks in the provided content. The only security consideration is typical: the useLocalStorage helper persists values to localStorage (don’t store secrets there) and fetch uses a relative API path; both are expected in UI code. Static scanner flags (template literals, links to a Netlify-hosted cheatsheet) are benign in this context. Overall risk is low

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Feb 15, 2026, 09:17 PM
Package URL
pkg:socket/skills-sh/thebushidocollective%2Fhan%2Freact-hooks-patterns%2F@537985128393edce2fef397f09998b2a4fe25f51