init
Warn
Audited by Socket on Apr 15, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The file operations are simple and local, but the skill's purpose is to weaken or override Claude's built-in safeguards via a persistent CLAUDE.md template. That capability is disproportionate to a normal initialization skill even without direct exfiltration or installs.
Confidence: 87%Severity: 76%
Audit Metadata