NYC

chartjs

Fail

Audited by Socket on Feb 15, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

[Skill Scanner] Installation of third-party script detected All findings: [CRITICAL] command_injection: Installation of third-party script detected (SC006) [AITech 9.1.4] [CRITICAL] command_injection: Installation of third-party script detected (SC006) [AITech 9.1.4] [CRITICAL] command_injection: Installation of third-party script detected (SC006) [AITech 9.1.4] [CRITICAL] command_injection: Installation of third-party script detected (SC006) [AITech 9.1.4] This skill/document is benign instructional content for Chart.js. It contains typical example code and links to official CDNs and docs. The only notable issues are minor: a simplistic CSV parsing example that lacks robust validation and a frequent setInterval update that could be misused for excessive updates. There are no signs of malicious behavior, credential theft, or obfuscation.

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Feb 15, 2026, 09:12 PM
Package URL
pkg:socket/skills-sh/vamseeachanta%2Fworkspace-hub%2Fchartjs%2F@531e97564946125e1ab354b310d5e6a0a602de41