make-skill

Warn

Audited by Socket on Sep 25, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is mostly aligned with its stated purpose and uses internal tooling rather than external installers, so it is not malware-like. However, it authorizes background autonomous completion, instructs subagents to skip further user approval, and can generate new skills that later execute shell commands, making it higher-risk than a normal documentation/meta skill.

Confidence: 90%Severity: 66%
Audit Metadata
Analyzed At
Sep 25, 2026, 04:42 AM
Package URL
pkg:socket/skills-sh/agentscope-ai%2Fqwenpaw%2Fmake-skill%2F@46081baefda98912a84565ae6e0c9fe25d6cb1f31c424289b1ea64fa9d40bf84