create-parents

Warn

Audited by Socket on Apr 6, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s stated purpose matches its file-processing behavior and no explicit exfiltration or credential theft is shown, but it handles extremely sensitive personal data and relies on multiple unverifiable local helper scripts executed via Bash. The local-only claim lowers malware confidence, yet overall security risk stays high because opaque executables process private family material and the skill includes destructive filesystem actions.

Confidence: 84%Severity: 78%
Audit Metadata
Analyzed At
Apr 6, 2026, 01:01 PM
Package URL
pkg:socket/skills-sh/xiaoheizi8%2Fparents-skills%2Fcreate-parents%2F@943be2fb183370152e3e4136a8d66a27219180e1
Security Audit — socket — create-parents