lwy-prompt-optimizer
Warn
Audited by Socket on Jun 14, 2026
2 alerts found:
AnomalySecurityAnomalyscripts/hooks/user-prompt-scan.cjs
LOWAnomalyLOW
scripts/hooks/user-prompt-scan.cjs
No clear evidence of overt malware (e.g., reverse shell, credential theft, or remote exfiltration) is present in the provided fragment. The primary security concerns are privacy and persistence: the module logs prompt excerpts and structural metadata to a local JSONL file and modifies local assistant/tool configuration files to install/merge prompt-optimization hooks. Review injectContext() and config-writing permissions/logic in the surrounding codebase to confirm there is no additional unsafe behavior beyond prompt augmentation.
Confidence: 100%Severity: 60%
SecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
Audit Metadata