tracekit-vue-sdk

Warn

Audited by Socket on Apr 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

Mostly coherent APM setup guidance for Vue, using official-looking TraceKit domains and proportionate credentials. The main concern is the agent-driven auth bootstrap via a separate skill and local script, which adds transitive trust and autonomous credential handling; overall this is suspicious rather than clearly malicious.

Confidence: 79%Severity: 57%
Audit Metadata
Analyzed At
Apr 15, 2026, 12:40 PM
Package URL
pkg:socket/skills-sh/tracekit-dev%2Ftracekit-for-ai%2Ftracekit-vue-sdk%2F@920510330f43505e7acbd0dc58133134fb085104