create-parents

Warn

Audited by Socket on Apr 6, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s stated purpose matches its file-processing behavior and no explicit exfiltration or credential theft is shown, but it handles extremely sensitive personal data and relies on multiple unverifiable local helper scripts executed via Bash. The local-only claim lowers malware confidence, yet overall security risk stays high because opaque executables process private family material and the skill includes destructive filesystem actions.

Confidence: 84%Severity: 78%
Audit Metadata
Analyzed At
Apr 6, 2026, 01:01 PM
Package URL
pkg:socket/skills-sh/xiaoheizi8%2Fparents-skills%2Fcreate-parents%2F@943be2fb183370152e3e4136a8d66a27219180e1