rp-refactor-cli
Warn
Audited by Socket on Jul 16, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill’s purpose and capabilities mostly align, but it routes repository analysis and edits through an external rp-cli binary whose full provenance and data handling are not verifiable from the skill. No clear malware or credential theft signals are present; the main concerns are external-tool trust and processing untrusted repo content with write access.
Confidence: 81%Severity: 72%
Audit Metadata