create-ex

Warn

Audited by Socket on Aug 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is internally coherent for local persona/memory generation and shows no explicit network exfiltration, but it processes unusually sensitive third-party personal data, creates persistent impersonation artifacts, and uses Bash with unsanitized user-controlled placeholders for create/update/delete operations. Main risk is local privacy exposure and shell/path abuse rather than confirmed malware.

Confidence: 83%Severity: 63%
Audit Metadata
Analyzed At
Aug 2, 2026, 02:55 PM
Package URL
pkg:socket/skills-sh/therealxiaomanchu%2Fex-partner-skill%2Fcreate-ex%2F@a7c06380fe74d0872840830fa6d4b863363c1f12
Security Audit — socket — create-ex