refactor-code-principles
Warn
Audited by Snyk on Jul 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.80). scripts/checklist.mjs dynamically imports the registry module at the runtime URL file://{homedir}/.claude/skills/refactor-chain/scripts/lib/principles.mjs (i.e. ~/.claude/skills/refactor-chain/scripts/lib/principles.mjs) and calls recommendPrinciples(), so that fetched code is executed at runtime and its output directly controls the recommendation/prompt content.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata