meta-command-creator
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated purpose is documentation, but the skill embeds real load-time !`command` directives in the markdown itself. There is no clear malware or exfiltration path, yet the actual execution footprint is inconsistent with a reference skill and creates unnecessary risk, especially with repeated pre-execution examples and the literal !`bash` directive.
Confidence: 90%Severity: 76%
Audit Metadata