skills/jawhnycooke/claude-plugins/developing-commands/Socket

developing-commands

Warn

Audited by Socket on Sep 4, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose is a command-development guide, but the skill embeds real pre-execution directives that can execute local commands and scripts at load time. There is no clear credential theft or remote payload, yet the live !`...` examples and unsanitized argument interpolation make the skill disproportionately risky for a documentation-style skill.

Confidence: 93%Severity: 84%

Audit Metadata

Analyzed At

Sep 4, 2026, 08:34 AM

Package URL

pkg:socket/skills-sh/jawhnycooke%2Fclaude-plugins%2Fdeveloping-commands%2F@f7daad6faf527550c62b3045d66e917597c1a2ddffa273b217567fbc8cfef09c