tracekit-vue-sdk
Warn
Audited by Socket on Apr 15, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
Mostly coherent APM setup guidance for Vue, using official-looking TraceKit domains and proportionate credentials. The main concern is the agent-driven auth bootstrap via a separate skill and local script, which adds transitive trust and autonomous credential handling; overall this is suspicious rather than clearly malicious.
Confidence: 79%Severity: 57%
Audit Metadata