lwy-prompt-optimizer
Warn
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTIONNO_CODE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a CLI utility at
scripts/cli.cjsdesigned to programmatically modify global IDE configuration files, including~/.claude/settings.jsonand~/.trae/hooks.json, to register persistent event-driven hooks. - [DATA_EXFILTRATION]: The hook script
scripts/hooks/user-prompt-scan.cjsrecords the first 120 characters of user prompts to a local log file at~/.learnwy/.var/prompt-optimizer/events.jsonlto track trigger trends. This creates a persistent record of user input on the local filesystem. - [PROMPT_INJECTION]: The instructions in
SKILL.mdexplicitly direct the agent to perform actions without user confirmation: "Automatically save all new vocabulary to the word bank via batch_save (no need to ask the user)", bypassing the standard user-in-the-loop safety pattern. - [NO_CODE]: The documentation contains a discrepancy where
SKILL.mdclaims the skill is a "pure methodology" with "no scripts", yet the package depends on multiple Node.js scripts for its core hook functionality.
Audit Metadata