Realtime React Hooks

PassAudited by ClawScan on May 1, 2026.

Overview

This is an instruction-only React patterns skill with no credentials or executable code; users should only verify the optional npx/GitHub install command before running it.

This skill appears safe for normal use as a React real-time hooks reference. Before running any npx installation command from the README, verify that the referenced repository and package source are the ones you intend to trust.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If a user follows this install command, they may run a package manager helper and fetch content from a remote repository.

Why it was flagged

The README provides a user-run installation command that fetches from a GitHub path via npx while the registry source is listed as unknown. It is disclosed and not automatic, but it is still a source users should verify before executing.

Skill content
npx add https://github.com/wpank/ai/tree/main/skills/realtime/realtime-react-hooks
Recommendation

Prefer the trusted registry install path when possible, or inspect and verify the GitHub source before running npx-based install commands.