create-cli
Audited by Socket on Mar 10, 2026
1 alert found:
Obfuscated FileThe skill describes a conventional, developer-focused CLI design/audit workflow that operates largely within local environment boundaries (reading guideline files, inspecting code with Glob/Grep, and executing a harmless --help on target CLIs). There is no indication of credential access, external network communication, or download/install actions. The footprint is coherent with its stated purpose of designing/auditing CLI surfaces. Minor caveats include the need for sandboxing when executing arbitrary commands and ensuring proper consent when inspecting user projects. Overall, the skill appears BENIGN with MEDIUM securityRISK due to potential command execution in local environments if not properly sandboxed.