refactor
Audited by Socket on Feb 21, 2026
1 alert found:
Security[Skill Scanner] Backtick command substitution detected No malicious code or network exfiltration patterns detected. The skill legitimately requests local file and git operations consistent with an automated refactoring tool. The primary risk is operational: because it makes automatic edits and runs shell/git commands, it requires caution, human review, and repository-level trust before execution. I judge it as not malicious but potentially high-impact if run without oversight. LLM verification: No explicit malware or remote-execution supply-chain components were found in the provided content. The primary risks are operational and privilege-related: the skill empowers automated local shell commands and repository modifications (git stash/commit/mv, test execution, automatic fixes). These are legitimate refactoring operations but carry medium risk if run without safeguards. Recommendations: require interactive confirmation for destructive actions, run tests in isolated sandboxes, provide