commander-builder
Warn
Audited by Socket on Apr 12, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's deck-building workflow is largely aligned with its stated purpose and uses appropriate MTG data sources, but its real footprint depends on unverifiable custom helper scripts from a separate companion skill and includes transitive skill installation guidance. The biggest risks are install-trust and transitive trust, not overt malware or data theft.
Confidence: 84%Severity: 62%
Audit Metadata