skill-creator
Warn
Audited by Socket on Sep 18, 2026
1 alert found:
AnomalyAnomalyscripts/deploy.sh
LOWAnomalyLOW
scripts/deploy.sh
This is a readable skill-deployment script with expected filesystem copying behavior. Its main security issue is insufficient validation of SKILL_NAME before using it in rm -rf and copy paths, creating a path-traversal and accidental deletion risk when arguments are untrusted. No direct malicious behavior is evident in the provided fragment.
Confidence: 98%Severity: 58%
Audit Metadata