skill-creator
Audited by Socket on Mar 1, 2026
1 alert found:
SecurityThis SKILL.md and accompanying templates describe a documentation-first meta-skill for authoring other skills. The content is largely benign: it contains templates, validation rules, and local command examples (mkdir, python3) but no network downloads, credential handling, or remote exfiltration. The primary operational risk is contextual: generated skills or helper scripts (discover_skills.py, validate_skill.py) — whose implementations are not included here — could introduce real security issues if they perform untrusted network operations, execute downloaded code, or improperly handle inputs. As presented, the document itself is low risk, but any actual script implementations referenced should be reviewed for unsafe behaviors before automated execution.