refactor
Fail
Audited by Socket on Feb 21, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
This manifest mandates immediate execution of a local, unreviewed Python orchestration module and therefore represents a high supply-chain risk pattern. The file itself contains no obvious malicious payload, but because it actively discourages inspection and grants the invoked module broad potential access (filesystem, environment, network, subprocesses), it should not be run in production or on sensitive repositories without prior code review and sandboxed testing. Audit skills.refactor.refactor and its dependencies, add provenance/integrity checks, restrict network and filesystem access during runs, and implement a dry-run/consent mechanism before allowing automatic execution.
Confidence: 98%
Audit Metadata