lwy-prompt-optimizer

Warn

Audited by Socket on Jun 14, 2026

2 alerts found:

AnomalySecurity
AnomalyLOW
scripts/hooks/user-prompt-scan.cjs

No clear evidence of overt malware (e.g., reverse shell, credential theft, or remote exfiltration) is present in the provided fragment. The primary security concerns are privacy and persistence: the module logs prompt excerpts and structural metadata to a local JSONL file and modifies local assistant/tool configuration files to install/merge prompt-optimization hooks. Review injectContext() and config-writing permissions/logic in the surrounding codebase to confirm there is no additional unsafe behavior beyond prompt augmentation.

Confidence: 100%Severity: 60%
SecurityMEDIUM
SKILL.md
Audit Metadata
Analyzed At
Jun 14, 2026, 07:03 AM
Package URL
pkg:socket/skills-sh/learnwy%2Fskills%2Flwy-prompt-optimizer%2F@f632eeced2b26314e01bd82b8d49ec269f31dd9e1dc4133676db44008a0cc906
Security Audit — socket — lwy-prompt-optimizer