moai-essentials-refactor

Warn

Audited by Socket on Mar 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

The skill fragment is coherently aligned with its stated purpose as an AI-powered, Context7 + Rope-based refactoring assistant. It presents plausible, proportional capabilities and data flows for an enterprise tool, with standard safeguards (backups, AI validation) and no evident hardcoded secrets. The primary security concerns would relate to proper authentication/authorization with external Context7 services and ensuring user consent/visibility for sending code to external pattern-database services. Overall risk appears moderate but acceptable for a legitimate development aid; no clear malicious behavior detected in the provided fragment.

Confidence: 70%Severity: 65%
Audit Metadata
Analyzed At
Mar 2, 2026, 05:17 PM
Package URL
pkg:socket/skills-sh/jg-chalk-io%2FNora-LiveKit%2Fmoai-essentials-refactor%2F@496470effa31159d535f626f0a1972a825199e7f