skill_creator
Fail
Audited by Snyk on Feb 16, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E006: Malicious code pattern detected in skill scripts.
- Malicious code pattern detected (high risk: 1.00). The make_skill.py tool allows unauthenticated arbitrary file creation and updates (including Python scripts) without path sanitization or containment, enabling attackers to write/overwrite skills or system files and thus deploy backdoors, RCE payloads, or supply-chain malware.
Audit Metadata