create-skill

Fail

Audited by Socket on Mar 12, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

Overall, the skill concept appears benign and aligned with its stated purpose of guiding interactive skill creation and upstream contribution for the elastic-docs-skills catalog. The footprint is limited to local scaffold generation, user prompts, and optional downstream contribution steps. No suspicious data flows, credential harvesting, or unverified binary installations are present in the described workflow. Monitor downstream steps (branch creation, PRs) to ensure proper access control and avoid inadvertently granting broad repository permissions.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 12, 2026, 03:11 PM
Package URL
pkg:socket/skills-sh/elastic%2Felastic-docs-skills%2Fcreate-skill%2F@516ff249ddbafc1fa0ac9479c0589f9f085b8390