writing-standards
Warn
Audited by Socket on Aug 13, 2026
1 alert found:
AnomalyAnomalyhooks/settings.example.json
LOWAnomalyLOW
hooks/settings.example.json
This snippet is not itself malicious code; it is a hook configuration that automatically executes a local Python script at session start and on every user prompt, and it explicitly states that the script’s stdout is added to the model context. That creates a significant trust and abuse surface: the referenced script’s provenance/integrity becomes the decisive factor for malware, privacy leakage, or prompt/context poisoning. Review and verify the exact inject-writing-standards.py content and its supply-chain integrity before use.
Confidence: 60%Severity: 55%
Audit Metadata