rp-refactor-cli

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s purpose and capabilities mostly align, but it routes repository analysis and edits through an external rp-cli binary whose full provenance and data handling are not verifiable from the skill. No clear malware or credential theft signals are present; the main concerns are external-tool trust and processing untrusted repo content with write access.

Confidence: 81%Severity: 72%
Audit Metadata
Analyzed At
Jul 16, 2026, 04:48 PM
Package URL
pkg:socket/skills-sh/lev-os%2Fagents%2Frp-refactor-cli%2F@1f528414a98da7d78e25f9469608a2a69a627f10833edf928a9355d77e2453fc
Security Audit — socket — rp-refactor-cli