refactor

Fail

Audited by Socket on Feb 21, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

This manifest mandates immediate execution of a local, unreviewed Python orchestration module and therefore represents a high supply-chain risk pattern. The file itself contains no obvious malicious payload, but because it actively discourages inspection and grants the invoked module broad potential access (filesystem, environment, network, subprocesses), it should not be run in production or on sensitive repositories without prior code review and sandboxed testing. Audit skills.refactor.refactor and its dependencies, add provenance/integrity checks, restrict network and filesystem access during runs, and implement a dry-run/consent mechanism before allowing automatic execution.

Confidence: 98%
Audit Metadata
Analyzed At
Feb 21, 2026, 07:25 AM
Package URL
pkg:socket/skills-sh/akiselev%2Fqt-llm-template%2Frefactor%2F@cc6e152d618810bc2a4e18748760856588d17386