discord

Warn

Audited by Socket on Feb 25, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

This skill is coherent with its stated purpose: sending messages to Discord using a Bot token via the official Discord HTTP API. There are no signs of obfuscation, third-party intermediaries, or download-and-execute supply-chain patterns. The main security concern is handling the sensitive Discord Bot token: the examples place credentials directly into shell commands which can leak via shell history, CI logs, or shared machines. Follow best practices: store tokens securely, avoid pasting them into shared logs, and use least-privilege bot tokens. Overall the code appears benign but with moderate operational risk tied to credential handling.

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Feb 25, 2026, 07:51 AM
Package URL
pkg:socket/skills-sh/prashaantr%2Fteach-claude-something-new%2Fdiscord%2F@d53617d51f4317691fa6070c8e79b61908b4db3c