advanced-skill-creator
Warn
Audited by Socket on Mar 31, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the visible skill is mostly a local meta-generator, but its purpose is to create additional executable skills and place them into marketplace-visible locations, which creates transitive trust risk. No direct credential theft or exfiltration is evident, and installer risk is limited to loosely versioned registry-based installation plus an unverified runtime-footprint mismatch from external listings.
Confidence: 80%Severity: 58%
Audit Metadata