SocketDevOfficial·12 Agent Skills Included

socket-sdk-js

JavaScript client for Socket.dev package security scoring

Connects Node.js applications to the Socket.dev API for package security scoring, dependency analysis, and quota management. Handles authentication, retries, timeouts, and batch lookups automatically without hand-rolled HTTP code. Includes typed methods and maintenance workflows to keep integrations reliable and up to date.

56|20

↗

npx skills add SocketDev/socket-sdk-js --all -g -y

Available:

Directs the agent to act as a senior TypeScript engineer and enforces strict rules for git safety, commits, testing, and release workflows when maintaining this SDK.

All Skills in This Repository (12)

Pure Emerald Level Indicators

📦 In Repo

SocketDev

worktree-management

Create, review, and prune Git worktrees for pull request workflows.

scanning-security

Scan repository configurations and GitHub workflows for security risks and misconfigurations.

handing-off

Summarize conversation details into a structured handoff document.

reviewing-code

Perform multi-pass code reviews across multiple AI backends.

scanning-quality

Analyze codebases for bugs, security issues, and quality metrics.

updating

Automate dependency updates, lockfile validation, and workflow synchronization.

plug-leaking-promise-race

Diagnose promise leaks in JavaScript async loop code.

locking-down-programmatic-claude

Enforce strict permission flags and modes for programmatic Claude API calls.

trimming-bundle

Analyze built JavaScript bundles to detect and stub unused code paths.

driving-cursor-bugbot

Automate responses, classifications, and fixes for Cursor Bugbot review comments in GitHub pull requests.

guarding-paths

Audit repositories for duplicate path constructions and consolidate them into canonical declarations.

updating-lockstep

Detect and correct dependency drift in lockstep.json manifests.

Official

Advanced

Frequently Asked Questions

FAQPage Schema

How to install socket-sdk-js?▼

Run `npx skills add SocketDev/socket-sdk-js --all -g -y` in your terminal to install all skills in this suite globally.

What does the Socket SDK do?▼

It is the official JavaScript and TypeScript client for the Socket.dev API, letting your app fetch package security scores, run dependency analysis, and check quota without writing raw HTTP requests.

How to check an npm package's security score in Node.js?▼

Create a SocketSdk client with your API key and call getScoreByNpmPackage with the package name and version to get its dependency score.

Can I analyze multiple packages at once?▼

Yes. The batchPackageFetch method accepts a list of package URLs and returns analysis results for all of them in a single request.

Does the SDK handle retries and timeouts?▼

Yes. You configure retries, retry delay, and timeout when creating the client, and it applies exponential backoff to failed requests automatically.