claude-code-skill
Warn
Audited by Socket on Aug 19, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the core capabilities match a Claude Code orchestration skill, so this is not fundamentally deceptive, but it enables broad autonomous execution and optional third-party proxy credential forwarding. Main concerns are high operational risk, indirect prompt-injection exposure, and unverifiable/personal-repo provenance for the surrounding ecosystem rather than confirmed malware.
Confidence: 84%Severity: 74%
Audit Metadata