1 file · 16 lines · 713 B
View on GitHub
- format-javascript-files.json 16 lines · 713 B
format-javascript-files.json
JSON
{
"description": "Automatically format JavaScript/TypeScript files after any Edit operation using ..."
"hooks": {
"PostToolUse": [1 item]
}
}
Scanned by NVIDIA SkillSpector
Automated static analysis (no LLM) · v2.12.0 · 2026-10-17
7 observations
scanner score 12/100
SkillSpector looks for patterns such as shell commands, credential access, network calls or unpinned dependencies. An observation is something worth reading in the files before you install, not a confirmed vulnerability. Components that run code locally, like hooks, MCP servers and security tooling, naturally show more of them.
- Manifest references MCP server without version pin: 'npx prettier'.MCP Rug Pull · SKILL.md:1
- Manifest references MCP server without version pin: 'npx so'.MCP Rug Pull · SKILL.md:1
- MCP server referenced without pinned version: 'npx prettier'.MCP Rug Pull · SKILL.md:3
- MCP server referenced without pinned version: 'npx prettier'. ×2MCP Rug Pull · format-javascript-files.json:2
- MCP server referenced without pinned version: 'npx so'.MCP Rug Pull · SKILL.md:3
Showing 6 of 7 observations. Learn more about NVIDIA SkillSpector or how components are reviewed.