skills/galaxy-dawn/claude-scholar/command-development/Socket

command-development

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS/HIGH RISK. The stated purpose is educational guidance for command development, but the skill embeds many real !`...` pre-execution directives that would run local commands and scripts at load time. That footprint is disproportionate for documentation and creates a serious risk of unintended execution even though there is no confirmed remote payload or credential theft.

Confidence: 94%Severity: 93%

Audit Metadata

Analyzed At

Sep 17, 2026, 08:02 AM

Package URL

pkg:socket/skills-sh/galaxy-dawn%2Fclaude-scholar%2Fcommand-development%2F@b03907ae236097262ffaaf2a57a26a2dbf285c1baa4070eba67b3d07e670a3a7