quadrants
Warn
Audited by Socket on Sep 18, 2026
1 alert found:
SecuritySecurityreferences/setup-guide.md
MEDIUMSecurityMEDIUM
references/setup-guide.md
The fragment is an integration/deployment guide and does not itself contain evident malware. It has material security risks: a gateway token is configured as a public client-side variable, gateway traffic uses HTTP, and task data is intentionally forwarded to Discord. The referenced implementation files must be reviewed for authorization, webhook verification, input validation, and data handling before deployment. Secrets should remain server-side, transport should be encrypted, and API/webhook permissions should be scoped and authenticated.
Confidence: 97%Severity: 72%
Audit Metadata