skill-creator

No clear indicators of intentional malware/backdoor behavior are visible in this fragment. However, there are significant security risks typical of supply-chain content rendering: (1) DOM XSS potential due to container.innerHTML fed by a large HTML string constructed from EMBEDDED_DATA with not all interpolated fields verifiably escaped, and (2) potential malicious content loading via iframe.src set to file.data_uri without visible sandboxing or scheme restrictions. If EMBEDDED_DATA or file.data_uri can be attacker-controlled, this module should be treated as high-risk and reviewed for strict escaping, URI validation, and safe rendering/sandboxing.

The code appears to be a legitimate Claude Code adapter and contains no evident malware or intentional data theft. It has a concrete filesystem security issue: an attacker-controlled skill_name may enable path traversal or unintended file creation/overwrite through the generated SKILL.md path. Validate that skill_name is a safe single directory name and enforce that the resolved path remains under the project skills directory. Escape or constrain generated front matter values as well.

The code appears to be a legitimate Codex adapter rather than malware. Its principal security issue is unsafe path construction from `skill_name`, which can permit writes outside intended skill roots and potentially destructive recursive deletion during cleanup. Validate the name as a safe single directory component, resolve and enforce containment within each root, and avoid recursive deletion of pre-existing directories. The subprocess invocation uses argument arrays, no shell, and read-only sandboxing; no exfiltration or backdoor behavior is evident.