markdown-formatter
Warn
Audited by Socket on Sep 8, 2026
1 alert found:
AnomalyAnomalyscripts/sync-tap-payload.js
LOWAnomalyLOW
scripts/sync-tap-payload.js
This fragment is best characterized as a local installer/synchronizer that stages and atomically replaces the “skills/markdown-formatter” directory using a bundled file list. In the snippet itself there are no clear malicious behaviors (no network/exfiltration or runtime execution). However, it makes specific files executable and performs destructive directory replacement based entirely on ./runtime-payload content; therefore the overall risk depends on whether the packaged payload and runtime-payload file list are trustworthy and path-safe (not shown here).
Confidence: 56%Severity: 48%
Audit Metadata