skill-creator

Fail

Audited by Socket on Mar 7, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill-creator is a benign, high-level workflow orchestration tool intended to help users craft, test, and optimize AI agent skills. Its footprint aligns with its stated purpose: it describes processes, scripts, and artifacts used during skill development rather than performing sensitive operations or accessing user secrets. There are no direct credential accesses, no unverifiable binaries, and no data exfiltration patterns evident in the content. The primary risks are organizational (storage of evaluation data, reliance on external tooling) rather than security breaches. Overall, it is SUSPICIOUSLY low-risk but coherent with its purpose; given the complexity of workflows it describes, the risk posture is acceptable as Benign with a leaning toward low risk.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 7, 2026, 03:54 AM
Package URL
pkg:socket/skills-sh/ericgandrade%2Fclaude-superskills%2Fskill-creator%2F@deea4f817c884e915f98204743c9360e531160f4