tapestry
Warn
Audited by Socket on Mar 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The code acts as a plausible blueprint for a content-to-plan tool, but current form is a scaffold with multiple risky patterns (auto-install guidance, interactive prompts, and placeholder blocks). For secure deployment, replace scaffolds with verified, single-language implementable code, enforce strict input validation, remove automation around external tool installation, pin dependencies, and audit all data flows. Treat as SUSPICIOUS until a fully specified, audited version is provided.
Confidence: 75%Severity: 75%
Audit Metadata