create-skill
Fail
Audited by Socket on Mar 11, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The skill fragment is coherently aligned with its stated purpose of guiding users to create new skills and saving them as SKILL.md files. The footprint is minimal and typical for developer tooling: local file generation and optional global scope with explicit user prompts. The main security considerations are around file write access (especially at global scope) and ensuring user confirmation/backup when overwriting existing skill definitions. Overall, this appears benign with low inherent risk, assuming proper user consent and safe write operations are enforced.
Confidence: 98%
Audit Metadata