skill-creator

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/deploy.sh

This is a readable skill-deployment script with expected filesystem copying behavior. Its main security issue is insufficient validation of SKILL_NAME before using it in rm -rf and copy paths, creating a path-traversal and accidental deletion risk when arguments are untrusted. No direct malicious behavior is evident in the provided fragment.

Confidence: 98%Severity: 58%
Audit Metadata
Analyzed At
Sep 18, 2026, 06:12 AM
Package URL
pkg:socket/skills-sh/stifleur390%2Fagent-skills%2Fskill-creator%2F@bde0a75ee7a418fbdd99cda90c5c300cefe8147f013a8800398acf1b375d932e
Security Audit — socket — skill-creator