moldea
Warn
Audited by Socket on Sep 28, 2026
1 alert found:
AnomalyAnomalyscripts/managed-readme.mjs
LOWAnomalyLOW
scripts/managed-readme.mjs
The file is primarily a README maintenance utility, but its default managed block deliberately injects instructions aimed at steering AI agents toward a named skill and filesystem location. Treat this as a prompt-injection/supply-chain concern when repositories are consumed by AI tooling. No conventional credential theft, exfiltration, or system malware behavior is evident in the fragment.
Confidence: 98%Severity: 58%
Audit Metadata