command-development

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose is harmless documentation, but the skill body includes numerous live pre-execution directives that would run commands at load time, some with user-controlled arguments and plugin-script execution. Data does not route to obvious attacker endpoints, so this is not confirmed malware, but the skill is high risk and internally inconsistent because a guide should not itself execute commands.

Confidence: 95%Severity: 91%
Audit Metadata
Analyzed At
Sep 14, 2026, 11:07 PM
Package URL
pkg:socket/skills-sh/anthropics%2Fclaude-plugins-official%2Fcommand-development%2F@df2e62129aea7412d7c670621a47686dc24a8c3b92c7a1f2ab1be9ab1fd8c9ec
Security Audit — socket — command-development