create-senpai
Warn
Audited by Socket on Apr 10, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's capabilities mostly match its stated local persona-building purpose and there is no clear exfiltration path, but it handles very sensitive personal/lab materials, grants Bash, and generates downstream skills that may later run with agent authority. Recommended third-party export tools are unrelated personal repos, increasing supply-chain concern outside the core skill.
Confidence: 87%Severity: 58%
Audit Metadata