moonbit-toolchain

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The skill content is largely documentation and benign tooling, but it explicitly documents and exposes an experimental config-script/pre-build hook (and module-level postadd hook) that can execute arbitrary JavaScript/Python during builds or module operations — a clear supply-chain/backdoor capability that can be abused to run remote or arbitrary code if trusted projects are used.