create-senpai

Warn

Audited by Socket on Apr 10, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's capabilities mostly match its stated local persona-building purpose and there is no clear exfiltration path, but it handles very sensitive personal/lab materials, grants Bash, and generates downstream skills that may later run with agent authority. Recommended third-party export tools are unrelated personal repos, increasing supply-chain concern outside the core skill.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Apr 10, 2026, 11:53 PM
Package URL
pkg:socket/skills-sh/zhanghaichao520%2Fsenpai-skill%2Fcreate-senpai%2F@7118f360149db615615174c04d1a97c13fe49838