discord
Warn
Audited by Socket on Feb 25, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
This skill is coherent with its stated purpose: sending messages to Discord using a Bot token via the official Discord HTTP API. There are no signs of obfuscation, third-party intermediaries, or download-and-execute supply-chain patterns. The main security concern is handling the sensitive Discord Bot token: the examples place credentials directly into shell commands which can leak via shell history, CI logs, or shared machines. Follow best practices: store tokens securely, avoid pasting them into shared logs, and use least-privilege bot tokens. Overall the code appears benign but with moderate operational risk tied to credential handling.
Confidence: 75%Severity: 75%
Audit Metadata