commander-builder

Warn

Audited by Socket on Apr 12, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's deck-building workflow is largely aligned with its stated purpose and uses appropriate MTG data sources, but its real footprint depends on unverifiable custom helper scripts from a separate companion skill and includes transitive skill installation guidance. The biggest risks are install-trust and transitive trust, not overt malware or data theft.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
Apr 12, 2026, 03:04 PM
Package URL
pkg:socket/skills-sh/dan-blanchard%2Fmtg-skills%2Fcommander-builder%2F@fe10d7f8142acfbc6beb23123a7170b9363ba7d4