yzr-skill-creator
Audited by Socket on Aug 22, 2026
1 alert found:
AnomalyThis module is a test harness that intentionally performs executable hijacking for evaluation by writing a temporary executable ('claude'), chmodding it, and prepending its directory to PATH before invoking run_eval, while also passing a generated judge configuration via SMOKE_JUDGE_CONFIG. The primary security determinant is the unknown STUB_SRC content and the unknown implementation details of run_eval (where subprocess/network/side effects would occur). No direct malicious indicators (hardcoded credentials, explicit exfiltration, obfuscation) are visible in the fragment itself, but the design pattern creates high execution control and therefore a moderate-to-high potential security risk if STUB_SRC or run_eval is compromised.