Command Development
Warn
Audited by Socket on Oct 7, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose is educational, but the skill embeds live pre-execution directives that can run local commands and plugin scripts immediately on load. There is no clear credential theft or remote-code fetch, so this is not confirmed malware, but the executable footprint is inconsistent with a safe documentation skill and creates high execution risk.
Confidence: 92%Severity: 91%
Audit Metadata