fix-prose
Warn
Audited by Socket on Oct 11, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the purpose is coherent for prose-lint remediation, but the implementation is not proportionate because it executes a shell command at skill-load time with raw user arguments. The main risk is pre-execution command injection through $ARGUMENTS and caller-controlled lint commands, not overt malware or exfiltration.
Confidence: 93%Severity: 91%
Audit Metadata